Cybersecurity / Information Assurance Specialist

CSA Global LLC•Pensacola, FL

About The Position

CSA is seeking a Cybersecurity/Information Assurance Specialist to provide cybersecurity, Risk Management Framework (RMF), and system authorization support to the Department of the Navy Common Access Card Program Management Office (CAC-PMO). The position supports assessment and maintenance of information assurance security controls, identification and remediation of system vulnerabilities, development and maintenance of RMF documentation and artifacts, and coordination of authorization activities needed to achieve and maintain Authorities to Operate (ATOs). It also supports system hardening, vulnerability scanning, security assessment, and ongoing cybersecurity compliance across Navy information systems and network environments. CSA has delivered integrated technology and operational support services to the defense and federal sectors for nearly 50 years, deploying experienced teams, tools, and processes in operations centers, shipyards, training sites, and program offices.

Requirements

Ability to obtain and maintain an active Secret Clearance.
IA Contractor Training and Certification and Computing Environment (CE) certification, such as Security+.
Bachelor’s degree in Computer Science or Management Information Systems.
Eight years of experience.
General experience in Information Assurance, Cybersecurity, and Electronic Documentation.
Experience supporting DoD and/or Department of the Navy Risk Management Framework (RMF) activities.
Experience developing, reviewing, and maintaining RMF packages, security controls, cybersecurity artifacts, and system authorization documentation.
Working knowledge of the ATO / Assessment & Authorization lifecycle and cybersecurity risk-management processes.
Experience using eMASS to maintain RMF and system authorization documentation.
Working knowledge of DISA STIGs and security-hardening requirements for operating systems and applications.
Experience performing vulnerability assessment and compliance activities using ACAS.
Ability to analyze cybersecurity vulnerabilities and develop appropriate risk mitigation and remediation strategies.
Ability to coordinate effectively with system owners, cybersecurity personnel, validators, technical teams, and Government stakeholders.
DEERS application/function experience; personnel, education, and training system knowledge may be required at the task order level.
Ability to sit for extended periods and work at a computer workstation.
Ability to use hands and fingers to operate keyboards, mice, and other input devices.
Ability to communicate effectively, verbally and in writing.
Vision abilities may include close vision, distance vision, depth perception, and the ability to adjust.
Ability to stand, walk, bend, or reach and access equipment in data centers, offices, or under desks.
Ability to lift and/or move equipment weighing up to 25 pounds.

Responsibilities

Provide RMF and Certification & Accreditation / Assessment & Authorization support in accordance with Department of the Navy cybersecurity requirements.
Evaluate information assurance and cybersecurity controls for compliance, and identify vulnerabilities, risks, and required remediation actions.
Develop, collect, assemble, analyze, and maintain RMF documentation and cybersecurity artifacts supporting system authorization activities.
Enter and maintain authorization documentation and supporting evidence in the Enterprise Mission Assurance Support Service (eMASS).
Coordinate with system owners, validators, certification authorities, approving authorities, and other stakeholders to obtain and maintain system ATOs.
Apply and validate DISA Security Technical Implementation Guides (STIGs) and Group Policy Objects (GPOs) to secure operating systems and applications.
Perform vulnerability assessments and develop security assessment reports using Assured Compliance Assessment Solution (ACAS).
Configure and maintain ACAS capabilities, including required upgrades and patches supporting vulnerability-scanning activities.
Maintain cybersecurity and RMF documentation for Navy systems and applications, including DEERS/RAPIDS, PAS, and associated CAC-PMO capabilities.
Collaborate with Government program personnel, technical teams, system owners, and external stakeholders on cybersecurity lifecycle management, risk management, system authorization, and continuing compliance.