Information Assurance Specialist

Seneca Holdings•Mechanicsburg, PA

10d

About The Position

Seneca Technologies is hiring an Information Assurance Specialist II to provide cybersecurity, risk management, and compliance support in a Department of War (DOW) agency contractor environment. This hands-on role focuses on vulnerability assessment, system security engineering, and maintaining a strong security posture in compliance with federal and defense frameworks, including NIST 800-37 and Risk Management Framework (RMF) guidelines. The position is based in Mechanicsburg, Pennsylvania. Remote work may be authorized, but remote employees must live within commuting distance of an approved SIPRNet access location and be available to support classified work as needed. An active Secret clearance is required. Seneca Technologies is part of Seneca Nation Group, a federal government contracting business serving federal civilian, defense, and intelligence community customers. The company describes its workplace as collaborative and offers competitive pay, benefits and perks, work-life balance, professional development, and performance and recognition programs. Full-time employees regularly working at least 30 hours per week are eligible for benefits and paid leave programs.

Requirements

Current active Secret clearance.
Either a bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field, plus at least 3 years of experience in RMF or system security; or at least 7 years of directly relevant security engineering or cyber experience without a degree.
Comprehensive understanding of DoW RMF, NIST 800-37, and security authorization processes.
Hands-on experience evaluating security vulnerabilities and compliance on DoW networks.
Proficiency with DISA STIGs, vulnerability scanners, POA&Ms, and authorization packages.
Remote employees must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.

Nice To Haves

Veterans with expertise in the relevant areas are highly encouraged to apply.

Responsibilities

Conduct vulnerability scans and assessments, analyze findings, and recommend remediation approaches.
Track remediation status, coordinate vulnerability resolution efforts, and support compliance reporting.
Execute and oversee information assurance and cybersecurity processes aligned with DoD/DoW frameworks, DISA STIGs, and applicable policies.
Manage security documentation, artifacts, and authorization packages, including ATO packages, POA&Ms, and vulnerability tracking mechanisms.
Advise on security configurations and assist system administrators and engineers in maintaining security baselines across DoW networks.
Monitor system logs, security events, and compliance reports to identify anomalies or potential degradation of the security posture.