This position supports continuous monitoring, authorization-to-operate (ATO) lifecycle activities, security architecture, incident analysis, and the security operation of assigned information systems in coordination with Government leads, system owners, service lanes, and engineering personnel. Hands-on experience with XACTA or a comparable authorization repository, Splunk or similar log-analysis platforms, vulnerability-scanning tools, security monitoring, and assigned system technologies.