Information Security Specialist

For more than 60 years, Data Device Corporation (DDC) has been recognized as a world leader in the design and manufacture of high-reliability Connectivity, Power, and Control solutions for the Aerospace, Defense, and Space industries. Our dedication to supplying quality products, on-time delivery, and superior support, has contributed to the success of our customers and the critical missions they serve.

This position is 100% onsite at our Bohemia, NY office.

The salary range for this position is $70,000 to $90,000 annually and will depend upon experience.

This position requires a U.S Person or a person who can qualify for a Department of State or Department of Commerce License.

Position Summary:

The Information Security Specialist role will be helping to build and operate our internal security program. This is a hands-on role for someone who enjoys working across multiple domains rather than specializing in just one. You'll touch security operations, identity and access management, endpoint and network defense, vendor risk, compliance, and end-user enablement. You'll work closely with IT, engineering, and business teams to keep the company secure without slowing it down.

Key Position Accountabilities:

• Support day-to-day security operations, including alert triage in our SIEM and EDR platforms, log review, and assisting with incident response when something needs investigation. • Help administer identity and access management systems, including SSO, MFA, directory services, and the onboarding, transfer, and offboarding processes. Conduct periodic access reviews and clean up stale accounts and entitlements. • Maintain and improve endpoint security across the fleet, including EDR health, patch management, configuration baselines, and disk encryption. • Assist with network security tasks such as firewall rule reviews, VPN administration, segmentation work, and monitoring for misconfigurations. • Support the vulnerability management program: scanning, prioritizing findings, coordinating remediation with system owners, and tracking metrics over time. • Contribute to our compliance program by helping collect evidence, maintain policies, complete customer security questionnaires, and prepare for audits including CMMC/NIS2/Cyber Essentials+/[other compliance obligations]. • Support vendor risk management, including reviewing third-party security documentation and tracking risk acceptances. • Build and deliver security awareness content, including phishing simulations, onboarding training, and internal guidance. • Serve as a knowledgeable point of contact for employees with security questions, suspicious emails, lost devices, or access requests. • Document processes, runbooks, and standards so the program scales as the company grows.