Information Assurance Specialist III

Lawelawe Defense Inc • Bethesda, MD

2d • $95,000 - $118,000

About The Position

Lawelawe is seeking an experienced Information Assurance Specialist/ISSO with a strong focus on protecting sensitive systems and ensuring regulatory compliance. The ideal candidate will excel at solving complex security challenges, translating policies into actionable procedures, and managing daily security operations while responding to incidents and contributing to long-term cybersecurity planning. This role serves as a key security authority and trusted advisor, responsible for fortifying networks against evolving threats, shaping and enforcing Information Assurance policies, supporting Authority to Operate (ATO) processes, and ensuring the operation of vulnerability management programs.

Requirements

• Minimum of 6 or more years of experience demonstrating proficiency as an Information Assurance or Information System Security Officer.
• Bachelor’s degree and/or equivalency.
• Active Secret security clearance required.
• Must possess an IAT III certification.
• Possess an active CompTIA Security+ certification.
• Must be a U.S. Citizen.
• Excellent verbal and written communications skills.
• Knowledge of databases, spreadsheets and report writing.
• Ability to adapt to a consistently changing environment.
• Experience with various tools such as: SPLUNK, PowerShell, ACAS, NESSUS, Siphon, and other tools used within the DoD and MHS environment.
• Knowledge of APL list, eMASS, CSTARS, and other DoD sites for cybersecurity system management.
• Strong knowledge of technical domain data requirements, system architecture, sensor/data sources.
• Experience with applying STIGS.
• Strong knowledge of DoD and applicable service or agency security policies, manuals, and standards.
• Knowledge of processes in controlling, labeling, virus scanning, auditing tools, and secure data transfer between information systems.

Nice To Haves

• Prior experience supporting a DoD environment.

Responsibilities

• Participate in developing and writing certification and accreditation (C&A) documentation packages to help obtain an Authority to Operate (ATO) on systems and/or environments.
• Follow National Institute of Standards and Technology (NIST) and/or Department of Defense IA Certification and Accreditation Process standards.
• Manage or participate in the MTF Information Assurance Vulnerability Management (IAVM) program, including disseminating, coordinating, validating, reviewing, guiding, data entry, training, and monitoring compliance data.
• Use DoD and MHS approved vulnerability assessment and mitigation tools to identify vulnerabilities, apply mitigation, and identify potential weaknesses in IA programs.
• Identify security problems and requirements through studies, analysis, and research.
• Disseminate information, policies, procedures, and/or guidance to superior and subordinate units and manage tasks and requirements for MTF.
• Respond to reported security breaches, violations of rules, regulations, policies, procedures, and codes of conduct, and take appropriate action to minimize harm, investigate, evaluate, track, and report incidents.
• Manage the security of information systems slated for Certification & Accreditation (C&A).
• Support the information system owner/information owner for the completion of security-related responsibilities.
• Advise on system changes and their impact.
• Provide input on the continuous monitoring of information systems.
• Assess security events to determine impact, develop and execute corrective action plans, and make recommendations for long-term preventive solutions.
• Monitor and audit installed software and hardware tools for signs of suspicious activity.
• Implement, maintain, and proliferate new technologies to enhance network security posture.
• Develop and implement technical programs to ensure user adherence to systems security policies and procedures.
• Ensure access to computer applications, operating systems, and data is limited to authorized personnel.
• Review and design systems software routines to facilitate security processes.
• Work with other Information Technology (IT) Specialists and participate in operational teams.
• Assign work to team members, track work completion, and assess effectiveness and efficiency.
• Assist with customer ticketing system assignments and meet SLAs.
• Elevate difficult assignments to senior IA managers as needed.
• May be required to respond to support nights or weekends or be placed on an on-call schedule.

Benefits

• Compensation will be based on qualifications, relevant experience, and internal equity.
• Offers of employment are contingent upon satisfactory completion of a comprehensive background verification, inclusive of a criminal record check.
• Employment may be subject to other background checks, as required by the position.
• We are committed to fair and equitable compensation practices and are transparent about our pay structures.
• Our pay transparency efforts are aligned with state laws and regulations to ensure compliance and promote pay equity.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior