Information Assurance Specialist

Resource Management Concepts, Inc.•Dahlgren, VA

7d•$90,000 - $145,000

About The Position

Resource Management Concepts, Inc. (RMC) is hiring an Information Assurance Specialist to support its customer in Dahlgren, Virginia. The role supports the development and maintenance of Cybersecurity documentation and compliance with applicable DoD and DON requirements. It provides Cybersecurity oversight, direction, and guidance to help attain and maintain Authorities to Operate (ATOs) through the Risk Management Framework (RMF), while supporting uninterrupted delivery of information technology systems. The specialist supports certification and accreditation (C&A) packages, vulnerability assessment and remediation, security reviews, system scans, configuration audits, and security documentation. The role also involves using government Cybersecurity tools and maintaining records and reports in accordance with applicable standards and guidelines.

Requirements

Active DoD TOP SECRET clearance is required to start.
High school diploma or equivalent.
Current and active CompTIA Security+ CE (IAT Level II) certification.
IAM Level II or higher certification (CASP+ CE, CISM, CISSP, or CISSP Associate) within 60 days of start.
Three years of INFOSEC management experience, preferably in a DoD environment.
Two years of experience with the Navy RMF process and POA&M tracking and resolution.
Two years of experience with ACAS system vulnerability scanning through eMASS.
Master knowledge of the Navy’s Security Assessment and Authorization (SAA) policy.
Demonstrated competency in vulnerability remediation.
Demonstrated competency in creating mitigation statements.
Experience in VRAM compliance maintenance.
Experience performing DoD Security Technical Implementation Guides (STIGs).
Experience importing STIG checklist files into the STIG Manager.
Experience creating and maintaining Annual and Quarterly Security Reviews.
Experience with the RMF A&A process, including document preparation and submission.

Responsibilities

Assist with developing systems Cybersecurity documentation to support certification of compliance with applicable standards.
Provide Cybersecurity oversight, direction, and guidance to support attaining and maintaining ATOs through the RMF process.
Ensure compliance with DoD and DON Cybersecurity requirements and support uninterrupted delivery of information technology systems.
Support current and ongoing C&A packages.
Develop POA&Ms in response to reported security vulnerabilities.
Develop, review, and maintain mitigation statements for new and current security vulnerabilities.
Review vulnerability and compliance scanning of Navy Command networks and services using ACAS or other government solutions.
Respond to IAVAs as necessary to address system vulnerabilities.
Run and review system security utilization logs according to Cybersecurity standards.
Implement and support Cybersecurity standards, including NIST and RMF C&A standards.
Perform regular security system scans and maintain scan records as required by Cybersecurity guidelines.
Assist in preparing Annual Security Reviews, Quarterly Security Reviews, and eMASS packages.
Deploy Evaluate-STIG to network assets and review applicable STIG results to ensure compliance.
Use Visio to develop, update, and maintain network diagrams.
Review, update, validate, and author Cybersecurity procedures (SOPs).
Review and maintain an inventory of authorized software.
Audit and validate configurations on laptops, workstations, and servers.
Audit and validate configurations of network devices, systems, and applications based on DISA STIGs.
Monitor, review, and report on data restoration capabilities.

Benefits

High-quality, low-deductible healthcare plans.
Competitive 401K package.
Training, certification, and education investment to support employee career growth.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume