Information Assurance Specialist (Mid-Level)

DecisionPoint | Cortek

About The Position

DecisionPoint Corporation is seeking a Mid-Level Information Assurance (IA) Specialist to support our U.S. Transportation Command (USTRANSCOM) Integrated Booking System (IBS) program. This role is responsible for implementing and maintaining cybersecurity controls to ensure system compliance with Department of Defense (DoD) security requirements.The IA Specialist will support Risk Management Framework (RMF) activities, vulnerability management, and continuous monitoring efforts across the IBS system. This role works closely with developers, system administrators, and program leadership to ensure that security controls are properly implemented and maintained throughout the system lifecycle.The ideal candidate brings experience in DoD cybersecurity practices, strong attention to detail, and the ability to support security compliance in a dynamic, mission-driven environment.

Requirements

Active Secret Clearance
IAT Level II certification (CompTIA Security+ CE required)
Minimum 3+ years of experience in information assurance, cybersecurity, or related field
Experience supporting DoD RMF processes and documentation
Experience with vulnerability scanning tools (e.g., ACAS, SCAP, Fortify)
Familiarity with DISA STIGs and security compliance requirements
Knowledge of NIST SP 800-53 security controls
Strong analytical and problem-solving skills
Strong attention to detail and documentation accuracy

Nice To Haves

Experience supporting USTRANSCOM or DoD systems
Familiarity with eMASS or similar RMF tools
Experience with secure application development practices
Experience working in DevSecOps environments
Familiarity with CI/CD-integrated security practices
Experience supporting audit readiness or compliance activities (FISCAM/FIAR)

Responsibilities

Support implementation and maintenance of RMF security controls in accordance with DoD standards
Assist in development and maintenance of RMF documentation, including SSPs, POA&Ms, and control evidence
Conduct and support vulnerability scanning and analysis using tools such as ACAS, SCAP, or similar
Track and manage security findings and remediation efforts
Collaborate with developers and system administrators to remediate vulnerabilities and implement security controls
Ensure compliance with DISA STIGs and security configuration requirements
Support continuous monitoring activities, including security assessments and reporting
Assist in preparation and maintenance of ATO/ATC/IATT packages
Analyze security scan results and provide recommendations for mitigation
Maintain and update security documentation and artifacts in tools such as eMASS
Support incident response activities and security investigations as needed
Ensure security practices are integrated into the Software Development Life Cycle (SDLC)