Information Assurance Specialist III

Lawelawe Defense Inc•Bethesda, MD

5d•$95,000 - $118,000

About The Position

Lawelawe Defense Inc. is seeking an experienced Information Assurance Specialist/Information System Security Officer (ISSO) to protect sensitive systems, ensure regulatory compliance, manage security operations, respond to incidents, and contribute to cybersecurity planning. The role serves as a security authority and trusted advisor, shaping and enforcing Information Assurance policies, supporting Authority to Operate (ATO) processes, and maintaining vulnerability management programs. The specialist works with IT operational teams, supports system owners, helps manage team assignments, and may provide support at night or on weekends or participate in an on-call schedule as directed or needed.

Requirements

At least 6 years of experience demonstrating the required proficiency as an Information Assurance Specialist or Information System Security Officer.
Bachelor’s degree and/or equivalency.
Active Secret security clearance.
IAT III certification.
Active CompTIA Security+ certification.
U.S. citizenship.
Excellent verbal and written communication skills.
Knowledge of databases, spreadsheets, and report writing.
Ability to adapt to a consistently changing environment.
Experience with tools such as SPLUNK, PowerShell, ACAS, NESSUS, Siphon, and other tools used within the DoD and MHS environment.
Knowledge of APL list, eMASS, CSTARS, and other DoD sites for cybersecurity system management.
Strong knowledge of technical domain data requirements, system architecture, and sensor/data sources.
Experience applying STIGs.
Strong knowledge of DoD and applicable service or agency security policies, manuals, and standards.
Knowledge of processes for controlling, labeling, virus scanning, auditing tools, and secure data transfer between information systems.

Nice To Haves

Prior experience supporting a DoD environment.

Responsibilities

Participate in developing and writing certification and accreditation (C&A) documentation packages to help an organization or agency obtain an Authority to Operate (ATO) for its systems or environment.
Follow National Institute of Standards and Technology (NIST) and/or Department of Defense Information Assurance Certification and Accreditation Process standards in performing job functions.
Manage or participate in the MTF Information Assurance Vulnerability Management (IAVM) program, including disseminating, coordinating, validating, reviewing, guiding, data entry, training, and monitoring compliance data provided or available to and from DoD and MHS.
Use DoD- and MHS-approved vulnerability assessment and mitigation tools to identify vulnerabilities, apply mitigations, and identify potential weaknesses in IA programs.
Identify security problems and requirements through studies, analysis, and research.
Disseminate information, policies, procedures, and guidance to superior and subordinate units, and manage tasks and requirements for MTF.
Respond to reported security breaches and violations of rules, regulations, policies, procedures, and codes of conduct; minimize harm, investigate, evaluate, track, and report incidents.
Manage the security of information systems slated for Certification & Accreditation (C&A).
Support information system owners and information owners in completing security-related responsibilities.
Advise on system changes and their impact.
Provide input on continuous monitoring of information systems.
Assess security events, determine impact, develop and execute corrective action plans, and recommend long-term preventive solutions to management.
Monitor and audit installed software and hardware tools for signs of suspicious activity that could lead to security events.
Implement, maintain, and proliferate new technologies intended to enhance the overall network security posture.
Develop and implement technical programs to ensure users adhere to systems security policies and procedures.
Ensure access to computer applications, operating systems, stored programs, and data is limited to authorized personnel.
Review and design systems software routines to facilitate security processes.
Work with other Information Technology (IT) Specialists and participate in operational teams.
Assign work to team members, track completion, and assess the effectiveness and efficiency of work performed.
Assist with customer ticketing system assignments and meet service-level agreements (SLAs).
Elevate difficult assignments to senior IA managers as needed.
Provide support at night or on weekends, or be placed on an on-call schedule, when required to fulfill department-related duties as directed or needed by command, directorate, or department.