Information Assurance Specialist II

Vast•Long Beach, CA

1d•$44 - $63•Onsite

About The Position

Vast is looking for an Information Assurance Specialist II, reporting to the Information Security Manager, to support the development of the systems that will be required for the design and build of human-rated space stations. The Information Assurance Specialist II supports the development of security policies and procedures, ensuring compliance with pertinent regulations and security standards (i.e. NIST SP 800-171 Rev 2, NIST 800-53 Rev 5). This will be a full-time, exempt position located in our Long Beach location.

Requirements

2+ years of experience supporting compliance efforts in the Defense Industrial Base and/or within the broader commercial space industry
Previous experience implementing and documenting NIST standards (i.e. 800-53, 800-171, CSF)
Experience in continuously monitoring controls and conducting remediations
Experience in supporting certification assessments, gap assessments, self-assessments, and/or compliance audits.
Proficiency in security tools such as SIEM, IDS/IPS, antivirus, and vulnerability scanning.
Proficient understanding of cloud systems such as AWS, Google, and Azure

Nice To Haves

Possess an active certification listed under DoD 8140 IAM Level II and/or IAT Level II (i.e. Security+ CE, CISSP, etc.)
Familiarity with assessment & authorization platforms such as eMASS.
Prior experience obtaining ATOs and other similar authorizations for classified environments
Prior experience working in a fast-paced startup environment.

Responsibilities

Maintain compliance documentation for multiple standards/requirements such as NIST 800-171r2, NIST SP 800-53r5, CMMC 2.0, and ITAR/EAR
Support the build out of Vast’s compliance program for both corporate and mission environments
Evaluate and recommend security technologies, tools, and best practices.
Support change management and risk assessment efforts
Support all internal and external security assessments
Continuously monitor security systems, networks, and applications for compliance drift
Provide Information Security related training as required
Provide technical support to the Information Security Engineering function when appropriate