Senior Cybersecurity Specialist

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we’re looking for:

We are seeking a Senior Cybersecurity Specialist to support a federal agency's Post-Quantum Cryptography (PQC) program. This role sits at the intersection of cybersecurity program execution and enterprise-wide stakeholder engagement, helping the agency transition its cryptographic infrastructure, including cryptographic inventory, public-key infrastructure (PKI) and TLS, from quantum-vulnerable to quantum-resistant standards. The ideal Sr. Cybersecurity Specialist candidate brings deep cybersecurity program experience, strong technical documentation skills and the ability to build consensus and drive coordination across a large, complex federal enterprise. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you’ll be doing:

• Execute cybersecurity team initiatives in support of the program's PQC objectives.
• Establish and enforce security policies and procedures.
• Gather and organize technical information about the organization's missions, goals and requirements; existing security products; and ongoing Information Assurance (IA) programs.
• Develop and provide documentation necessary for PQC assessments and evaluations.
• Work with customers to outline roadmaps, strategies and approaches for the deployment of cross-cutting cybersecurity solutions.
• Provide communication outreach agency-wide to drive program and capability acceptance.
• Schedule and run meetings with stakeholders on behalf of the PQC team.

What you need to know:

• Core cryptographic concepts: symmetric vs. asymmetric encryption, hashing, digital certificates and key management.
• Networking and infrastructure fundamentals, including how encryption is applied in transit (e.g., TLS) and at rest across enterprise systems.
• Enterprise IT security architecture and how cybersecurity capabilities integrate with existing tools and services (e.g., vulnerability management, continuous monitoring)
• Security policy development and governance; understanding the drivers behind policy change (regulatory, technical or risk-based) and the ability to translate those drivers into clear, executable policy the customer can implement.
• Agile delivery practices (SCRUM/Kanban ceremonies) and how work gets prioritized, sized and delivered in that environment.

Must have’s:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field or an additional 4+ years of relevant work experience in lieu of degree.
• Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
• 5+ years of experience performing cybersecurity functions consistent with this role.
• Demonstrated experience designing and implementing enterprise cybersecurity capabilities
• Solid understanding of Post-Quantum Cryptography (PQC) concepts and quantum-vulnerability risk, prior hands-on PQC experience is not required
• Ability to track and interpret evolving federal cybersecurity policy and regulatory drivers (e.g., FISMA, NIST guidance, OMB directives) and translate them into practical guidance for customers
• General understanding of public-key infrastructure (PKI), TLS and cryptographic inventory/discovery concepts (e.g., Automated Cryptographic Discovery and Inventory or ACDI, tools) as they relate to a federal cryptographic modernization effort
• Strong written and verbal communication skills, with experience producing technical documentation for non-technical and executive audiences
• Experience coordinating across multiple stakeholder groups in a large, complex organization
• Strong self-directed research skills. PQC is an evolving space and much of the work involves figuring things out in real time rather than following an established playbook
• A proactive mindset and comfort with ambiguity. Successful team members find their own answers rather than waiting to be told and bring solutions to customers rather than just questions.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must currently be a U.S. citizen in compliance with federal contract requirements.

Beneficial to have:

• Prior experience directly supporting a Post-Quantum Cryptography (PQC) or broader cryptographic modernization program.
• Hands-on experience with cryptographic discovery/inventory tools (COTS or GOTS ACDI solutions).
• Hands-on experience with on-prem/enterprise PKI architecture, TLS migration or certificate/key management.
• Familiarity with cloud security concepts in AWS and Azure environments (e.g., cloud – native key management services, encryption configuration).
• Familiarity with NIST FIPS 203, FIPS 204 and FIPS 205 PQC standards and OMB Memorandum M-23-02.
• Prior experience supporting a federal civilian agency IT program.
• Experience with Zero Trust Architecture (ZTA) initiatives.

Where it’s done:

• Remote (Herndon, VA).

Originally posted on Himalayas