Senior Information Assurance Specialist

ValidaTek•Washington, DC

About The Position

The Senior Information Assurance Specialist provides advanced cybersecurity, information assurance, and risk management expertise in support of the FEMA Countering Weapons of Mass Destruction (CWMD) mission. The role develops, implements, and evaluates cybersecurity strategies, policies, standards, and technical solutions to protect mission-critical systems, networks, applications, and sensitive information. The specialist evaluates system security architectures, identifies vulnerabilities, assesses risks, and recommends mitigation strategies to support compliance with federal security requirements. The work includes Risk Management Framework (RMF) support, security assessments, continuous monitoring, vulnerability management, incident response, and security documentation. The position requires independently addressing complex cybersecurity challenges and providing technical guidance to government stakeholders and program leadership.

Requirements

Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related discipline.
At least eight years of relevant experience in information assurance, cybersecurity, information systems security, or a related technical field; equivalent combinations of education, certifications, and relevant experience may be considered.
Active Top Secret (TS) security clearance.
Demonstrated experience implementing and maintaining federal cybersecurity policies, procedures, and security controls.
Hands-on experience supporting the Risk Management Framework (RMF) and federal system authorization processes.
Working knowledge of NIST cybersecurity standards, including NIST SP 800-53, 800-37, 800-30, and applicable 800-series publications.
Experience developing and maintaining ATO packages, System Security Plans, Security Assessment Reports, POA&Ms, and other security compliance documentation.
Experience conducting vulnerability assessments, security control assessments, risk analyses, and security compliance reviews.
Knowledge of federal cybersecurity requirements, including FISMA, FIPS, and applicable DHS security policies and directives.
Experience with security assessment tools, vulnerability scanning technologies, security monitoring platforms, and configuration compliance tools.
Strong analytical, problem-solving, technical writing, and communication skills.
Ability to work independently, manage competing priorities, and communicate complex technical security issues to technical and non-technical stakeholders.

Responsibilities

Develop, implement, and maintain information assurance policies, procedures, technical standards, and security controls in accordance with federal cybersecurity requirements.
Conduct cybersecurity risk assessments, vulnerability assessments, and security compliance reviews; identify threats and recommend mitigation strategies.
Support the Risk Management Framework (RMF), including security categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Develop, review, and maintain Authorization to Operate (ATO) documentation, System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and other security artifacts.
Evaluate system architectures, hardware, firmware, software, and applications to identify security weaknesses and verify compliance with security requirements.
Monitor network environments, analyze security logs, and investigate potential cybersecurity incidents, including malware, phishing, intrusion attempts, denial-of-service attacks, and unauthorized access.
Develop and implement strategies to detect, prevent, and mitigate cybersecurity threats, vulnerabilities, and emerging attack vectors.
Analyze security data and trends to identify recurring vulnerabilities, emerging threats, and opportunities to strengthen security posture.
Support security control assessments, technical testing, vulnerability scanning, and remediation to validate implemented security controls.
Apply security configuration standards, including Security Technical Implementation Guides (STIGs), to ensure systems are securely configured and maintained.
Develop and maintain disaster recovery, contingency planning, and incident response procedures to support operational resilience and continuity of mission-critical services.
Provide technical recommendations on cybersecurity technologies, tools, processes, and security architecture improvements.
Research emerging cybersecurity threats, technologies, and industry best practices and recommend improvements to organizational security capabilities.
Collaborate with government stakeholders, system administrators, engineers, and other technical personnel to incorporate cybersecurity requirements throughout the system development and operational lifecycle.
Provide cybersecurity guidance, communicate risk findings, and brief program leadership on security posture, compliance gaps, and recommended corrective actions.
Perform additional duties and responsibilities as required to support program objectives.