Information Security Specialist

Sherpa

Information Security Specialist responsible for maintaining information systems security and compliance. Collaborating with IT and Security teams for vulnerability management and incident response.

Posted 5/1/2026full-timeSpringfield • Virginia • 🇺🇸 United StatesMid-LevelSenior💰 $105,000 - $125,000 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityLinux

About the role

Key responsibilities & impact

Manage system vulnerabilities, including scanning, prioritization, and remediation
Support patching and configuration enforcement through endpoint management solutions
Provide continuous monitoring of information systems, ensuring audit logs are collected, reviewed, and anomalous activity is identified and mitigated
Analyze and correlate logs from endpoints, servers, identity systems, and cloud services
Configure and tune alerting and automated response capabilities for security events
Perform incident response and reporting for cybersecurity events including malware, phishing, unauthorized access, and data exfiltration
Maintain Plans of Action & Milestones (POA&M) and track remediation to closure
Ensure all system security documentation (e.g., SSPs, baselines, policies, procedures) is current and audit-ready
Assist in development and maintenance of security policies, standards, and technical controls
Review and assess security impact of system changes as part of change control processes
Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms
Conduct user activity monitoring and support investigations related to potential insider threat or policy violations
Run security awareness initiatives, including phishing simulations and training activities
Prepare reports on the status of vulnerabilities, incidents, and overall security posture

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field
3–5 years of experience in information security or cybersecurity operations
Experience with Microsoft security technologies, including Microsoft Defender, Microsoft Intune, and Microsoft Purview
In depth understanding of software and system vulnerability management
Experience with log aggregation, SIEM tools, or advanced threat detection
Experience with managing the security of Windows and Linux systems in an Enterprise environment
Experience implementing and maintaining STIGS or CIS Benchmarks.

Benefits

Comp & perks

We offer a competitive benefits package, covering the cost of medical for you and your family
we also offer dental, vision, health and wellness benefits
a generous retirement savings plan
we extend a generous PTO policy

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

vulnerability managementincident responselog analysissecurity monitoringsecurity configurationmalware analysisphishing detectionsystem security documentationchange controluser activity monitoring

Soft Skills

analytical skillsproblem-solvingcommunicationattention to detailteam collaborationorganizational skillstraining and awareness