Information Assurance Specialist (Mid-Level)

DecisionPoint | Cortek • ,

1d

About The Position

DecisionPoint Corporation is seeking a Mid-Level Information Assurance (IA) Specialist to support our U.S. Transportation Command (USTRANSCOM) Integrated Booking System (IBS) program. This role is responsible for implementing and maintaining cybersecurity controls to ensure system compliance with Department of Defense (DoD) security requirements. The IA Specialist will support Risk Management Framework (RMF) activities, vulnerability management, and continuous monitoring efforts across the IBS system. This role works closely with developers, system administrators, and program leadership to ensure that security controls are properly implemented and maintained throughout the system lifecycle. The ideal candidate brings experience in DoD cybersecurity practices, strong attention to detail, and the ability to support security compliance in a dynamic, mission-driven environment.

Requirements

• Active Secret Clearance
• IAT Level II certification (CompTIA Security+ CE required)
• Minimum 3+ years of experience in information assurance, cybersecurity, or related field
• Experience supporting DoD RMF processes and documentation
• Experience with vulnerability scanning tools (e.g., ACAS, SCAP, Fortify)
• Familiarity with DISA STIGs and security compliance requirements
• Knowledge of NIST SP 800-53 security controls
• Strong analytical and problem-solving skills
• Strong attention to detail and documentation accuracy

Nice To Haves

• Experience supporting USTRANSCOM or DoD systems
• Familiarity with eMASS or similar RMF tools
• Experience with secure application development practices
• Experience working in DevSecOps environments
• Familiarity with CI/CD-integrated security practices
• Experience supporting audit readiness or compliance activities (FISCAM/FIAR)

Responsibilities

• Support implementation and maintenance of RMF security controls in accordance with DoD standards
• Assist in development and maintenance of RMF documentation, including SSPs, POA&Ms, and control evidence
• Conduct and support vulnerability scanning and analysis using tools such as ACAS, SCAP, or similar
• Track and manage security findings and remediation efforts
• Collaborate with developers and system administrators to remediate vulnerabilities and implement security controls
• Ensure compliance with DISA STIGs and security configuration requirements
• Support continuous monitoring activities, including security assessments and reporting
• Assist in preparation and maintenance of ATO/ATC/IATT packages
• Analyze security scan results and provide recommendations for mitigation
• Maintain and update security documentation and artifacts in tools such as eMASS
• Support incident response activities and security investigations as needed
• Ensure security practices are integrated into the Software Development Life Cycle (SDLC)

Benefits

• Equal Employment Opportunity and Affirmative Action employer
• Will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed