Information Assurance Specialist I

American Systems•Monterey, CA

5d•$40 - $44

About The Position

Now Hiring at AMERICAN SYSTEMS Epsilon, Inc. has joined AMERICAN SYSTEMS! As one organization, we offer expanded resources, streamlined operations, and increased opportunities for growth and development. Join us to be part of a dynamic, collaborative environment dedicated to innovation and customer success. Responsibilities An Average Day: As the Information Assurance Specialist I you will support cybersecurity and compliance activities by ensuring information systems meet federal security requirements, maintain operational authorizations, and comply with standards such as the Risk Management Framework. You will work closely with system owners, administrators, and security stakeholders to: Audit systems, SOPs, and security checklists. Review and analyze audit logs for compliance with STIGs and IAVAs. Support Authorization to Operate (ATO) requirements through ongoing compliance monitoring. Manage system configuration baselines and documentation. Ensure compliance with RMF requirements, including media sanitization, contingency planning, incident response, insider threat policies, and ISAs/SLAs. Monitor cloud provider security controls, including FedRAMP-authorized environments. Create and modify required artifacts for RMF Steps 1-5. Conduct independent reviews, testing, and assessment of all information, artifacts, and other relevant data pertaining to systems progressing through RMF. Load artifacts into eMASS. Select and tailor controls in eMASS. Develop Plan of Actions and Milestones (POA&Ms) / Risk Assessment Reports (RARs), and automated scan reviews. Responsible for Certification Test and Evaluation (CT&E) system's compliance with all applicable Information Assurance Controls (IACs) for an assigned system, including developing the appropriate test procedures, executing the test procedures, and accurately documenting the results of security testing. Review CT&E test plans and procedures to ensure the test plan addresses level of effort and validates all IA requirements.

Requirements

U.S. Citizen
Active DoW Secret Clearance
Associate degree or higher in IT, Cybersecurity, Information Assurance, or related field; or 1–2 years of relevant professional experience
Department of War (DoW) 8570.01-M, IAM Level II certification required.
Two (2) or more years of experience in the cybersecurity field.
Experience with assessment and authorization (A&A).
Experience with assessing and validating RMF, National Institute of Standards and Technology (NIST), and Committee on National Security Systems Instruction (CNSSI) security controls.
Hands-on experience with eMASS.
Visio diagram creation and modification.
RMF Documentation creation and modification (SSP, CCB, COOP, etc.).
Familiarity with NIST 800-53 controls.
Ability to provide security assessment reports that cover risks that the client should be aware of and mitigate risk with residual remaining risks.

Responsibilities

Audit systems, SOPs, and security checklists.
Review and analyze audit logs for compliance with STIGs and IAVAs.
Support Authorization to Operate (ATO) requirements through ongoing compliance monitoring.
Manage system configuration baselines and documentation.
Ensure compliance with RMF requirements, including media sanitization, contingency planning, incident response, insider threat policies, and ISAs/SLAs.
Monitor cloud provider security controls, including FedRAMP-authorized environments.
Create and modify required artifacts for RMF Steps 1-5.
Conduct independent reviews, testing, and assessment of all information, artifacts, and other relevant data pertaining to systems progressing through RMF.
Load artifacts into eMASS.
Select and tailor controls in eMASS.
Develop Plan of Actions and Milestones (POA&Ms) / Risk Assessment Reports (RARs), and automated scan reviews.
Responsible for Certification Test and Evaluation (CT&E) system's compliance with all applicable Information Assurance Controls (IACs) for an assigned system, including developing the appropriate test procedures, executing the test procedures, and accurately documenting the results of security testing.
Review CT&E test plans and procedures to ensure the test plan addresses level of effort and validates all IA requirements.