Information System Security Specialist II

DirectViz Solutions•Virginia Beach, VA

5d•Onsite

About The Position

DirectViz Solutions (DVS) is a dynamic and rapidly growing government contractor committed to delivering innovative IT solutions that address the mission-critical needs of our government clients. Through the expertise and dedication of our talented team, we provide cutting-edge technology services designed to achieve success and exceed expectations. At DVS, we prioritize our employees as our greatest asset. We offer competitive compensation, comprehensive medical benefits, a 401(k) match, generous PTO accrual, professional development reimbursement, corporate-funded technology certifications, and robust employee recognition and appreciation programs. Information System Security Specialist II Overview If you are passionate about cybersecurity, Risk Management Framework (RMF) compliance, and protecting mission-critical systems, this is an exciting opportunity to support secure enterprise environments within a high-visibility government program. We are seeking an experienced Information System Security Specialist II to support cybersecurity authorization activities, vulnerability management, and security compliance initiatives across complex information systems. The ideal candidate will have hands-on experience with RMF processes, STIG assessments, vulnerability remediation support, and security authorization documentation in DoD environments.

Requirements

Minimum certification compliant with DoDD 8140.01 Intermediate Level requirements for specialty area 461 (or equivalent certification as defined by the applicable Technical Instruction).
A final adjudicated Tier 5 security investigation IT Level I designation in JPAS and/or DISS.
Minimum of two (2) years of experience performing Risk Management Framework (RMF) activities.
Demonstrated experience conducting STIG assessments utilizing SCAP benchmarks.
Experience performing vulnerability assessments using ACAS.
Hands-on experience using eMASS.
Experience developing and managing POA&M entries.
Experience supporting RMF Step 5 authorization activities in an ISSE capacity.
Demonstrated ability to communicate cybersecurity risks and remediation.
Active Secret clearance required.
At least three personnel within this labor category must be eligible for Top Secret/SCI access.

Nice To Haves

Experience supporting DoD or Navy cybersecurity environments.
Familiarity with NIST RMF, DoD cybersecurity policies, and continuous monitoring requirements.
Strong analytical, documentation, and communication skills.
Ability to work effectively in a collaborative, fast-paced environment.

Responsibilities

Support Risk Management Framework (RMF) activities for government information systems throughout the system lifecycle.
Conduct Security Technical Implementation Guide (STIG) assessments using SCAP benchmarks and related compliance tools.
Perform vulnerability assessments utilizing the Assured Compliance Assessment Solution (ACAS) tool.
Support the development, tracking, and maintenance of Plans of Action and Milestones (POA&M).
Utilize Enterprise Mission Assurance Support Service (eMASS) to manage cybersecurity authorization packages and security documentation.
Assist with RMF Step 5 authorization activities while supporting Information System Security Engineer (ISSE) functions.
Analyze cybersecurity findings and provide risk reduction recommendations to technical and non-technical stakeholders.
Collaborate with system administrators, engineers, ISSOs, and government personnel to ensure cybersecurity compliance and remediation efforts are completed.
Support continuous monitoring initiatives and maintain compliance with DoD cybersecurity policies and standards.
Prepare and maintain cybersecurity documentation, assessment reports, and compliance artifacts.