Cyber Risk & Compliance Specialist - USGS Federal Systems (REMOTE)
About the position Work at the intersection of mission and technology – protecting systems that literally map the nation. Secure the backbone of national geospatial data that supports everything from disaster response to environmental research and infrastructure planning! This is your chance to join a high-impact team responsible for securing the infrastructure behind The National Map—one of the United State Geological Survey’s (USGS) flagship programs. This role is critical to maintaining the integrity and availability of vital elevation data used nationwide for science, safety, and sustainability. Joining us as a key member of the cybersecurity operations, you will collaborate directly with USGS stakeholders, IT administrators, and Department of the Interior (DOI) security teams. You’ll assist in tracking, remediating, and preventing security threats across a complex ecosystem of desktops, laptops, servers, and enterprise systems. Join us in supporting USGS and be a part of a thoughtful, experienced team that values precision, proactive problem-solving and professional growth while supporting a federal science mission with long-term national significance! Requirements • Must have the ability to receive / maintain a favorable adjudicated Public Trust investigation (US Citizen or Lawful Permanent Resident for at least 3 years) • You have achieved a Bachelor’s Degree + 5 years of relevant experience with hands-on cybersecurity or system security experience in order to understand system interdependencies, identifying risks, and implementing practical, compliant security controls. • Demonstrated expertise in vulnerability remediation, log analysis and risk assessment in order to monitor, analyze, prioritize, and resolve vulnerabilities to maintain system authority to operate (ATO) and ensure mission continuity. • Experience in patch management and verification to ensure systems remain protected against known threats and compliant with USGS’s enterprise patching schedule. • Strong understanding of federal compliance frameworks (i.e., STIG) to support system hardening, compliance tracking, and audit preparedness throughout the system lifecycle. • Clear communication and cross team coordination as you must be comfortable working across distributed teams, communicating clearly with system owners, engineers, and federal stakeholders to explain risks, outline remediation steps, and coordinate implementation. Nice-to-haves • Industry Certifications Security +, CISSP, Certified Ethical Hacker, or equivalent Benefits • Health benefits are not offered