Information Assurance Specialist

Resource Management Concepts • Dahlgren, VA

6d

About The Position

Resource Management Concepts, Inc. (RMC) is hiring an Information Assurance Specialist to support a customer in Dahlgren, Virginia. The role supports the development and maintenance of cybersecurity documentation and compliance, including certification and authorization activities under the Risk Management Framework (RMF). The specialist helps maintain authorizations to operate (ATOs), supports current and ongoing certification and accreditation packages, and works to ensure compliance with Department of Defense (DoD) and Department of the Navy (DON) cybersecurity requirements and uninterrupted IT system delivery.

The position involves vulnerability assessment and remediation, security reviews, scanning, configuration audits, and cybersecurity procedure maintenance. The specialist also supports preparation of Annual Security Reviews (ASRs), Quarterly Security Reviews (QSRs), and eMASS packages, and maintains network diagrams, software inventories, and records of security scans.

Requirements

• Active DoD Top Secret clearance required to start.
• High school diploma or equivalent.
• Current and active CompTIA Security+ CE (IAT Level II) certification.
• IAM Level II or higher certification (CASP+ CE, CISM, CISSP, or CISSP Associate) within 60 days of start.
• Three years of experience in INFOSEC management, preferably in a DoD environment.
• Two years of experience with the Navy RMF process and POA&M tracking and resolution.
• Two years of experience with ACAS system vulnerability scanning through eMASS.
• Mastery of the Navy’s Security Assessment and Authorization (SAA) policy.
• Demonstrated competency in vulnerability remediation and creating mitigation statements.
• Experience in VRAM compliance maintenance.
• Experience performing DoD Security Technical Implementation Guides (STIGs).
• Experience importing STIG checklist files into the STIG Manager.
• Experience creating and maintaining Annual and Quarterly Security Reviews.
• Experience with the RMF A&A process, including document preparation and submission.

Responsibilities

• Assist with developing systems cybersecurity documentation to support certification of compliance with applicable standards.
• Provide cybersecurity oversight, direction, and guidance to attain and maintain ATOs through the RMF process.
• Ensure compliance with DoD and DON cybersecurity requirements and support uninterrupted delivery of IT systems.
• Support current and ongoing certification and accreditation (C&A) packages.
• Develop Plans of Action and Milestones (POAMs) in response to reported security vulnerabilities.
• Develop, review, and maintain mitigation statements for new and existing security vulnerabilities.
• Review vulnerability and compliance scans of Navy Command networks and services using ACAS or other government solutions.
• Respond to Information Assurance Vulnerability Alerts (IAVAs) as necessary to address system vulnerabilities.
• Run and review system security utilization logs in accordance with cybersecurity standards.
• Implement and support cybersecurity standards, including NIST and RMF C&A standards.
• Perform regular security system scans and maintain scan records as required by cybersecurity guidelines.
• Assist in preparing Annual Security Reviews (ASRs), Quarterly Security Reviews (QSRs), and eMASS packages.
• Deploy Evaluate-STIG to network assets and review applicable STIG results to ensure compliance.
• Use Visio to develop, update, and maintain network diagrams.
• Review, update, validate, and author cybersecurity procedures (SOPs).
• Review and maintain an inventory of authorized software.
• Audit and validate configurations deployed on laptops, workstations, and servers.
• Audit and validate configurations of network devices, systems, and applications based on DISA STIGs.
• Monitor, review, and report on data restoration capabilities.

Benefits

• Career growth and investment in employee training, certification, and education.
• High-quality, low-deductible healthcare plans.
• Competitive 401K package.

What This Job Offers

• Job Type: Full-time
• Education Level: High school or GED