Information Security Specialist

For more than 60 years, Data Device Corporation (DDC) has been recognized as a world leader in the design and manufacture of high-reliability Connectivity, Power, and Control solutions for the Aerospace, Defense, and Space industries. Our dedication to supplying quality products, on-time delivery, and superior support, has contributed to the success of our customers and the critical missions they serve.

This position requires a U.S Person or a person who can qualify for a Department of State or Department of Commerce License.

The Information Security Specialist role will be helping to build and operate our internal security program. This is a hands-on role for someone who enjoys working across multiple domains rather than specializing in just one. You'll touch security operations, identity and access management, endpoint and network defense, vendor risk, compliance, and end-user enablement. You'll work closely with IT, engineering, and business teams to keep the company secure without slowing it down.

• Support day-to-day security operations, including alert triage in our SIEM and EDR platforms, log review, and assisting with incident response when something needs investigation.
• Help administer identity and access management systems, including SSO, MFA, directory services, and the onboarding, transfer, and offboarding processes. Conduct periodic access reviews and clean up stale accounts and entitlements.
• Maintain and improve endpoint security across the fleet, including EDR health, patch management, configuration baselines, and disk encryption.
• Assist with network security tasks such as firewall rule reviews, VPN administration, segmentation work, and monitoring for misconfigurations.
• Support the vulnerability management program: scanning, prioritizing findings, coordinating remediation with system owners, and tracking metrics over time.
• Contribute to our compliance program by helping collect evidence, maintain policies, complete customer security questionnaires, and prepare for audits including CMMC/NIS2/Cyber Essentials+/[other compliance obligations].
• Support vendor risk management, including reviewing third-party security documentation and tracking risk acceptances.
• Build and deliver security awareness content, including phishing simulations, onboarding training, and internal guidance.
• Serve as a knowledgeable point of contact for employees with security questions, suspicious emails, lost devices, or access requests.
• Document processes, runbooks, and standards so the program scales as the company grows.

• Associate’s or Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or related field preferred.
• 3+ years of experience in information security, IT operations, or a closely related field, with hands-on exposure to multiple security domains.
• Working knowledge of common security tools: SIEM, EDR, vulnerability scanners, identity providers (Okta, Entra ID, or similar), and cloud platforms (AWS, Azure, or GCP).
• Solid fundamentals in networking, operating systems and authentication protocols.
• Familiarity with compliance frameworks, especially CMMC [Cyber Essentials / etc for Europe]
• Comfortable scripting in Python, PowerShell, or Bash for automation and ad hoc tasks.
• Strong written and verbal communication skills, with the ability to explain security concepts to non-technical audiences.
• Self-directed and comfortable working across teams in a fast-moving environment.
• Industry certifications such as CISSP, CISM, CCIE, CCNP Security, CompTIA Security+, Network+, CISA, CRISC or similar.
• Willingness to be part of the on-call rotation

• Strong technical curiosity and desire to learn emerging technologies.
• Familiarity with offensive security concepts and tooling
• Understanding or experience with CMMC Level 2 Certification
• Interest in Artificial Intelligence and business process automation.
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to work effectively with technical and non-technical users.
• Organized and detail-oriented with strong follow-through.
• Self-motivated with the ability to manage multiple priorities.
• Team player with a customer-service mindset.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. This job description indicates, in general the nature and levels of work, knowledge, skills, abilities and other essential functions (as covered under the ADA) expected of the employee. Duties, responsibilities and activities may change at any time with or without notice as required.

Data Device Corporation is an Affirmative Action/Equal Opportunity Employer and is committed to providing equal employment opportunity (EEO) for all persons in all facets of employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, gender, sexual orientation, gender identity, national origin, citizenship status, marital status, genetic information, disability, protected veteran status or any other legally protected status.