Position Summary

The Information Assurance Specialist serves as a senior ISSO / cybersecurity professional supporting the five program portfolios. This role is responsible for ensuring the confidentiality, integrity, and availability of systems (traditional, cloud-native AWS, and authorized SaaS), driving RMF/CSRMC activities, and supporting continuous authorization (cATO) in a DevSecOps environment.

Key Responsibilities

• Provide ISSO support across assigned systems.
• Lead operationalization of the Risk Management Framework / Cybersecurity Risk Management Construct (CSRMC) within cloud-native and DevSecOps frameworks.
• Implement and assess security controls, manage control inheritance, and maintain near real-time body of evidence in eMASS.
• Support categorization, selection/tailoring of controls, POA&M lifecycle management, and continuous monitoring.
• Monitor security posture in CI/CD pipelines (SAST/DAST, SCA, container scanning) and collaborate with development teams on remediation.
• Develop and maintain RMF control family plans, Security Assessment Plans (SAPs), and other authorization artifacts.
• Support incident response activities for cloud-native systems and act as security liaison with SaaS providers.
• Perform control self-assessments according to the continuous monitoring and ATO schedule.

Required Qualifications

• Active SECRET clearance.
• Bachelor’s degree from an accredited institution in Information Technology, Computer Science, Engineering, or related technical discipline.
• Current DoD 8570/8140 certification meeting IAM Level II or IAT Level II baseline requirements (e.g., CISSP, Security+ CE, CISM, CASP+ CE).
• Five (5) years of dedicated Information Assurance experience, with at least three (3) consecutive years relevant to the tasks and demonstrating recent (within the last year) hands-on understanding of the DoD cybersecurity environment.
• Flexible work from home options available.