IT Cyber Specialist

AFS IT is seeking an IT Cyber Specialist to track, review, and help remediate the vulnerabilities and misconfigurations that the Wiz for Gov Cloud Security Posture Management (CSPM) / CNAPP platform identifies across AFS's Azure, AWS, and GCP cloud environments. This role is the day-to-day owner of the cloud vulnerability lifecycle: from the first finding in Wiz for Gov through risk-based prioritization, ticketing, remediation follow-up, validation, and closure.

Responsibilities

Monitor and review new and recurring findings in Wiz for Gov across all onboarded cloud accounts; Validate findings, remove noise, and prioritize by severity, exploitability, internet exposure, asset criticality, and business context; Open, assign, and track tickets for each actionable finding, ensuring a named system owner and target date for every item; Maintain an accurate vulnerability register and track findings through to verified closure, including risk acceptances and approved exceptions; Work directly with system owners and infrastructure, cloud, and application teams to explain findings, recommend remediation actions, and assess feasibility and impact of proposed fixes; Follow up on open items, escalate overdue or blocked remediation, and help remove impediments; Drive server patch compliance through the Patch Management Incident Ticket process; Drive the removal of end-of-life software in server and endpoint environments; Re-scan and validate in Wiz for Gov that remediation is effective before closing items; Respond to critical and high-severity findings, including P1 incident creation and escalation; Serve as a technical escalation point for IT Cyber team activities involving cloud vulnerabilities; Produce recurring metrics and dashboards for IT Cyber leadership and stakeholders; Support evaluation of security posture against cybersecurity frameworks and support audit and compliance evidence requests; Support day-to-day Wiz for Gov operations, including user access and roles, saved views and reports, and notification and ticketing integrations; Recommend tuning of policies, ignore rules, and workflows to reduce false positives; Document procedures, runbooks, and lessons learned; Participate as a DevOps/Agile team member; Support the Product Owner in refining backlog items; Deliver fully tested, documented work products that meet the Definition of Done

Requirements

U.S. Citizen located on U.S. soil (mandatory); Vulnerability management and remediation tracking (Intermediate); Cyber security fundamentals, including risk-based prioritization (CVSS, exploitability, asset criticality) (Intermediate); Cloud security concepts across Azure, AWS, and/or GCP (Intermediate); Cybersecurity frameworks: CMMC, NIST SP 800-171, CIS (Basic to Intermediate); Incident and ticket management, including escalation workflows (Intermediate); Agile methodology (Basic to Intermediate); Written and verbal communication; ability to work independently on moderately complex tasks and collaborate effectively with technical and non-technical stakeholders

Nice to have

Cloud Security Posture Management (CSPM/CNAPP) experience in Azure, AWS, and/or GCP; Experience with Wiz or the Wiz for Gov platform; Patch management and end-of-life software remediation experience; Scripting or automation for reporting and ticketing workflows (e.g., Python, PowerShell, APIs); Security certification such as Security+, CySA+, CISSP, or a cloud security certification

Benefits

Hands-on experience, certifications, industry training and more