Information Assurance Specialist
About The Position
DecisionPoint Corporation is seeking a Cyber Security Engineer/Information Assurance Subject Matter Expert (SME) to join the Transportation Geospatial Information System (TGIS) contract. The Cyber SME will focus on completing the IA and Cybersecurity requirements necessary to harden system resources; evaluate and recommend remediations/mitigations of non-compliant STIGs and vulnerability scans; accomplish Fortify scans/reports and collaborate with developers for remediation/mitigations; complete security controls evaluations and RMF artifacts/documents; create, maintain, and remediate POA&Ms; facilitate on time ATO package submittal and resolve issues reported by the SCAR for ATO approval; research, implement, and respond to CTOs and other cyber orders; and brief leadership on cyber/IA statuses. This position requires a minimum of 2 days a week on-site support at Scott AFB, an Active Secret clearance and IAWIP certification. Remote work is authorized on days when on-site support is not required. The Information Assurance (IA) Specialist will work with team members and outside organizations to submit and maintain Authority to Operate (ATO) packages. This will entail, but not be limited to, creating and revising documents, reviewing and analyzing automated scan results, creating and maintaining Plans of Action and Milestones (POA&Ms), and ensuring the security of the information systems. The IA Specialist must have good communication skills, both written and verbal.
Requirements
- Active Secret clearance
- Bachelor’s degree in computer science or equivalent work experience
- IAWIP IAT level II certification or higher: ex: Security+, GICSP, GSEC, CND, SSCP, CCNA-Security
- Knowledge/familiarity of Risk Management Framework (RMF) and NIST SP 800-53
- Experience with eMASS
- Knowledge/experience creating/maintaining POA&Ms
- Experience reviewing/analyzing SCAP scans, ACAS scans, STIG checklists
- Experience creating/maintaining system documentation (plans, policies, topologies, etc.)
- Experience with Office products (Outlook, Teams, Excel, Word, PowerPoint)
- Ability to communicate effectively both written and verbal
- Knowledge/experience with Ports, Protocols, and Services (PPS)
- Experience conducting and analyzing software code scans with Fortify Static Code Analyzer (SCA)
- Experience utilizing Jira/Confluence software
Responsibilities
- Completing the IA and Cybersecurity requirements necessary to harden system resources
- Evaluate and recommend remediations/mitigations of non-compliant STIGs and vulnerability scans
- Accomplish Fortify scans/reports and collaborate with developers for remediation/mitigations
- Complete security controls evaluations and RMF artifacts/documents
- Create, maintain, and remediate POA&Ms
- Facilitate on time ATO package submittal and resolve issues reported by the SCAR for ATO approval
- Research, implement, and respond to CTOs and other cyber orders
- Brief leadership on cyber/IA statuses
- Creating and revising documents
- Reviewing and analyzing automated scan results
- Ensuring the security of the information systems
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Number of Employees
101-250 employees
