Information Assurance Specialist – Clearance Required

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in supporting information assurance and cybersecurity initiatives for ACWS and related enterprise environments.

• Facilitate the implementation and upkeep of security controls in alignment with NIST, RMF, STIG, and relevant DoD standards.

• Aid in system security authorization, assessment, accreditation, and Authority to Operate (ATO) processes.

• Perform security assessments, vulnerability analyses, compliance reviews, and security control evaluations.

• Oversee security findings and coordinate remediation efforts with system, application, infrastructure, and DevSecOps teams.

• Create and sustain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, assessment documentation, and continuous monitoring records.

• Assist with ongoing monitoring, security metrics, reporting on status, and fulfilling cybersecurity reporting requirements.

• Support security audits, inspections, customer evaluations, and responses to identified issues.

• Assess system and application modifications for ongoing adherence to security standards.

• Recognize cybersecurity risks and collaborate with stakeholders to develop practical mitigation strategies.

• Provide support for incident response and security investigations, including root cause analysis and remediation activities.

• Keep abreast of cybersecurity threats, regulations, security controls, and federal best practices pertinent to ACWS.

• Work in partnership with system administrators, engineers, developers, DevSecOps personnel, program managers, and security stakeholders.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field; equivalent experience may be accepted.

• 5-10+ years of experience in supporting Information Assurance, cybersecurity, information security, or cyber risk management programs.

• Familiarity with NIST cybersecurity frameworks and Risk Management Framework (RMF) processes.

• Proven experience in developing and maintaining security documentation and compliance artifacts.

• Experience in managing vulnerabilities, conducting security assessments, and ensuring compliance.

• Understanding of security controls, risk management, secure configurations, and cybersecurity best practices.

• Excellent analytical, organizational, writing, and communication abilities.

• Active Secret clearance or the capacity to obtain and maintain one.

• U.S. citizenship is mandatory.

• Current DoD 8140-aligned cybersecurity certification such as CISSP, CISM, or Security+.

• Additional security certifications like Security+, CISSP, CAP, CISM, or CASP+ are preferred.

• Experience supporting Army or DoD programs and their security needs.

• Demonstrated capability in leading or coordinating cybersecurity, RMF, ATO, or compliance activities for federal or DoD systems.

• Familiarity with eMASS, ACAS, SCAP, STIGs, or similar cybersecurity tools.

• Practical knowledge of NIST 800-53, NIST 800-171, CMMC, FedRAMP, or comparable federal security standards.

• Experience working in Agile or DevSecOps settings and integrating security tasks into delivery workflows.

• Support experience for cloud security initiatives within AWS, Azure, or equivalent environments.

• Experience with Appian-based applications or Appian Cloud security and configuration practices is preferred.

• SAFe certification such as SAFe Practitioner, Architect, or DevOps is a plus.

• Experience collaborating with enterprise platform teams and shared services across multiple delivery teams.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance plans.

• Generous paid time off policy, including holidays and sick leave.

• Retirement savings plan with company match.

• Opportunities for professional development and training.

• Support for work-life balance and flexible working arrangements.