IT Cybersecurity Specialist- CORP at Semper Valens Solutions in Belcamp, MD, USA

Job description

• We are seeking a highly skilled and motivated IT Cybersecurity Specialist to join our IT department at the SVS Belcamp office. This is a full-time, on-site position, requiring daily presence at our Belcamp location to support the security of our IT environment and collaborate with our internal teams. This role is responsible for the day-to-day operation monitoring, and maintenance of security controls across our Microsoft cloud environment, endpoint devices, and network infrastructure. The ideal candidate will have a solid background in IT with a focus on cybersecurity operations, and experience supporting compliance-driven environments. Working in a cloud-joined Microsoft environment (Microsoft 365, Defender, Entra ID, Intune), the specialist will help ensure our systems remain secure, monitored, and audit-ready in support of DoD contract requirements.

Responsibilities

• Monitor, triage, and respond to security alerts and incidents using Microsoft Defender.
• Investigate suspicious activity, perform incident response, and document findings and remediation actions.
• Support Security event logging, correlation, and audit-trail maintenance.
• Administer endpoint security controls through Microsoft Intune (device compliance, configuration, and enrollment).
• Manage identity and access security in Microsoft Entra ID, including Conditional Access policies, MFA enforcement, and authentication controls.
• Support least-privilege role management and access reviews.
• Implement and maintain technical controls aligned with CMMC Level 2, NIST SP 800-171, ISO 27001, and DFARS 252.204-7012.
• Maintain security documentation and provide technical evidence to support audits and assessments.
• Administer compliance and data-protection controls in Microsoft Purview, including Data Loss Prevention (DLP), Information Protection / sensitivity labels, and retention policies to safeguard company data.
• Work closely with the IT Director and the Information Technology department to implement and enforce security policies and procedures.
• Provide security guidance and technical support to IT staff and end users.
• Evaluate and recommend new technologies and solutions to enhance business operational security.

Requirements

• 5+ years of experience in IT, with a focus on or significant exposure to cybersecurity operations.
• Hands-on experience with Microsoft 365 security, Microsoft Defender, Entra ID, Intune, and Microsoft Purview (DLP, Information Protection, and/or compliance management).
• Experience with the administration of endpoint devices (laptop and mobile devices).
• Experience working in environments subject to compliance requirements such as CMMC, NIST 800-171, and ISO 27001.
• Strong problem-solving and analytical skills with attention to detail..
• Solid understanding of security fundamentals, threat detection, and incident response.
• Excellent communication and interpersonal skills.
• Proactive and self-motivated with ability to manage multiple priorities.
• Strong collaboration skills to work effectively with compliance and IT teams.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field. Three (3) additional years of relevant IT/cybersecurity experience may substitute for a degree.
• Experience with Microsoft Admin Center(s).
• Familiarity with Conditional Access, MFA, and Zero Trust concepts.
• Experience supporting a DoD or defense-contractor environment.
• CompTIA Security + (preferred), Network + or equivalent.
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), or equivalent.
• Additional security or Microsoft certifications a plus.

Skills

Required

• Microsoft 365 security
• Microsoft Defender
• Microsoft Entra ID
• Microsoft Intune
• Endpoint device administration
• Identity and access management
• Conditional Access policies
• MFA enforcement
• Least-privilege role management
• Data Loss Prevention (DLP)
• Retention policies

Preferred

• Microsoft Admin Center(s)
• Zero Trust concepts
• CompTIA Security+
• Network+