Information Assurance Specialist - Clearance Required

The Information Assurance Specialist will work closely with system administrators, engineers, developers, DevSecOps personnel, program managers, and security stakeholders to maintain a strong security posture across a mission-critical enterprise application environment.

• Support information assurance and cybersecurity activities for ACWS and associated enterprise environments.

• Assist with implementation and maintenance of security controls in accordance with NIST, RMF, STIG, and applicable DoD requirements.

• Support system security authorization, assessment, accreditation, and Authority to Operate (ATO) activities.

• Conduct security assessments, vulnerability reviews, compliance evaluations, and security control reviews.

• Monitor security findings and coordinate remediation activities with system, application, infrastructure, and DevSecOps teams.

• Develop and maintain security documentation including System Security Plans (SSPs), POA&Ms, policies, procedures, assessment artifacts, and continuous monitoring documentation.

• Assist with continuous monitoring activities, security metrics, status reporting, and cybersecurity reporting requirements.

• Support security audits, inspections, customer assessments, and responses to identified findings.

• Evaluate system and application changes to ensure continued compliance with established security requirements.

• Work with stakeholders to identify cybersecurity risks and support development of practical mitigation strategies.

• Support incident response and security investigations as needed and participate in root cause and remediation activities.

• Stay current on evolving cybersecurity threats, regulations, security controls, and federal best practices relevant to ACWS.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or related field; equivalent experience may be considered.

• 5-10+ years of experience supporting Information Assurance, cybersecurity, information security, or cyber risk management programs.

• Knowledge of NIST cybersecurity frameworks and Risk Management Framework (RMF) processes.

• Experience developing and maintaining security documentation and compliance artifacts.

• Experience supporting vulnerability management, security assessments, and compliance activities.

• Understanding of security controls, risk management, secure configuration, and cybersecurity best practices.

• Strong analytical, organizational, writing, and communication skills.

• Active Secret clearance or ability to obtain and maintain one.

• U.S. citizenship required.

• Active Secret security clearance.

• Active DoD 8140-aligned cybersecurity certification such as CISSP, CISM, or Security+.

• Security certifications such as Security+, CISSP, CAP, CISM, or CASP+.

• Experience supporting Army or DoD programs and security requirements.

• Demonstrated experience leading or coordinating cybersecurity, RMF, ATO, or compliance activities for federal or DoD systems.

• Experience with eMASS, ACAS, SCAP, STIGs, or related cybersecurity tools.

• Practical experience with NIST 800-53, NIST 800-171, CMMC, FedRAMP, or comparable federal security requirements.

• Experience working in Agile or DevSecOps environments and integrating security tasks into delivery processes.

• Experience supporting cloud security initiatives within AWS, Azure, or similar environments.

• Experience with Appian-based applications or Appian Cloud security and configuration practices preferred.

• SAFe certification such as SAFe Practitioner, Architect, or DevOps.

• Experience supporting enterprise platform teams and shared services across multiple delivery teams.

The target salary range for this position goes up to $165,000. The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.