Senior Information Assurance Specialist

ValidaTek, Inc.•Washington, DC

About The Position

The Senior Information Assurance Specialist provides advanced cybersecurity, information assurance, and risk management expertise in support of the FEMA Countering Weapons of Mass Destruction (CWMD) mission. The position develops, implements, and evaluates cybersecurity strategies, policies, standards, and technical solutions to protect mission-critical systems, networks, applications, and sensitive information. It evaluates security architectures, identifies vulnerabilities, assesses risk, and recommends mitigation strategies to support compliance with federal security requirements. The specialist supports the Risk Management Framework (RMF), security assessments, continuous monitoring, vulnerability management, incident response, and security documentation and procedures. The role requires independently addressing complex cybersecurity challenges and providing technical guidance to government stakeholders and program leadership.

Requirements

Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related discipline.
Minimum of eight years of relevant experience in information assurance, cybersecurity, information systems security, or a related technical field; equivalent combinations of education, certifications, and relevant experience may be considered.
Active Top Secret (TS) security clearance.
Demonstrated experience implementing and maintaining federal cybersecurity policies, procedures, and security controls.
Hands-on experience supporting RMF and federal system authorization processes.
Working knowledge of NIST cybersecurity standards, including NIST SP 800-53, 800-37, 800-30, and applicable 800-series publications.
Experience developing and maintaining ATO packages, System Security Plans, Security Assessment Reports, POA&Ms, and other security compliance documentation.
Experience conducting vulnerability assessments, security control assessments, risk analyses, and security compliance reviews.
Knowledge of federal cybersecurity requirements, including FISMA, FIPS, and applicable DHS security policies and directives.
Experience with security assessment tools, vulnerability scanning technologies, security monitoring platforms, and configuration compliance tools.
Strong analytical, problem-solving, technical writing, and communication skills.
Ability to work independently, manage competing priorities, and communicate complex technical security issues to technical and non-technical stakeholders.

Responsibilities

Develop, implement, and maintain information assurance policies, procedures, technical standards, and security controls in accordance with federal cybersecurity requirements.
Conduct cybersecurity risk assessments, vulnerability assessments, and security compliance reviews; identify potential threats and recommend mitigation strategies.
Support RMF activities, including security categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Develop, review, and maintain ATO documentation, SSPs, POA&Ms, SARs, and other required security artifacts.
Evaluate system architectures, hardware, firmware, software, and applications to identify security weaknesses and check compliance with security requirements.
Monitor network environments, analyze security logs, and investigate potential incidents such as malware, phishing, intrusion attempts, denial-of-service attacks, and unauthorized access.
Develop and implement strategies to detect, prevent, and mitigate cybersecurity threats, vulnerabilities, and emerging attack vectors.
Analyze security data and trends to identify recurring vulnerabilities, emerging threats, and opportunities to strengthen security posture.
Support security control assessments, technical testing, vulnerability scanning, and remediation activities to validate security controls.
Apply security configuration standards, including STIGs, to ensure systems are securely configured and maintained.
Develop and maintain disaster recovery, contingency planning, and incident response procedures for operational resilience and continuity of mission-critical services.
Provide technical recommendations concerning cybersecurity technologies, tools, processes, and security architecture improvements.
Research emerging cybersecurity threats, technologies, and industry best practices and recommend improvements to organizational security capabilities.
Collaborate with government stakeholders, system administrators, engineers, and other technical personnel to incorporate cybersecurity requirements throughout the system development and operational lifecycle.
Provide cybersecurity guidance, communicate risk findings, and brief program leadership on security posture, compliance gaps, and recommended corrective actions.
Perform additional duties and responsibilities as required to support program objectives.