Information Assurance Specialist

Role Overview

• Provide Information Assurance (IA) and cybersecurity support to ensure compliance with DoW cybersecurity policies and standards.
• Support the development, submission, and maintenance of ATO packages within the Enterprise Mission Assurance Support Service (eMASS).
• Create, update, and manage IA artifacts required for: Initial system authorization, Continuous monitoring, and System reauthorization / re-accreditation.
• Implement cybersecurity processes aligned with the Risk Management Framework (RMF), including: Security control identification and assessment, Control implementation documentation, and Authorization package support.
• Develop and maintain Plan of Actions and Milestones (POA&M) to track vulnerabilities and mitigation strategies.
• Coordinate with system stakeholders to track remediation efforts and ensure timely closure of findings.
• Identify, track, and remediate vulnerabilities in accordance with: Information Assurance Vulnerability Alerts (IAVAs) and Operational Directives (OPDIRs).
• Perform vulnerability scanning and compliance validation using Assured Compliance Assessment Solution (ACAS).
• Assess and document system compliance with Security Technical Implementation Guides (STIGs).
• Utilize STIG checklists and Security Content Automation Protocol (SCAP) tools for validation.
• Develop and maintain system security documentation, including: System management procedures, Standard operating procedures (SOPs), and Cybersecurity process documentation.
• Support Annual Security Reviews (ASRs) and assist in Verification and Validation (V&V) activities.
• Collaborate with Government and contractor personnel to ensure systems maintain continuous ATO compliance.

Requirements

• Experience supporting cybersecurity efforts within DoD or federal environments.
• Strong knowledge of: Risk Management Framework (RMF), eMASS, and ATO processes and lifecycle management.
• Experience with vulnerability management and remediation tracking.
• Familiarity with ACAS, STIGs, and SCAP compliance tools.
• Ability to create and maintain detailed cybersecurity documentation.
• Strong communication and coordination skills across technical and non-technical stakeholders.
• Prior experience supporting system accreditation and continuous monitoring activities.
• Must be a U.S. Citizen.
• Must be able to obtain and maintain a Secret Security Clearance.

Tech Stack

• Cyber Security

Benefits

• Health insurance
• Professional development opportunities