Senior Information Assurance Specialist

Senior Information Assurance Specialist

At ValidaTek, we modernize and optimize IT services to solve some of the most critical challenges facing federal civilian and defense agencies. From customers to partners to top-talent employees, ValidaTek puts people first, empowering them to exceed expectations and transform government organizations. Our success starts and ends with our people, so we built a company where great people can do great things, with the resources and autonomy to make decisions that transform organizations. We operate as one team of diverse people, united by a passion for continuous growth and optimization. Our commitment to quality and performance optimization is the reason why our IT Service Projects and New Development Projects have been appraised at CMMI Maturity Level 5, positioning us as one of a handful of elite companies to receive the highest form of third-party validation.

The Senior Information Assurance Specialist plays a pivotal role in safeguarding the cybersecurity posture of a DHS-affiliated program. This position is responsible for designing, developing, and implementing advanced cybersecurity methodologies, tools, and policy frameworks to ensure the confidentiality, integrity, and availability of critical systems and data. Core responsibilities include intrusion detection and prevention, secure software/system design, reverse engineering, vulnerability assessments, and data protection strategies. The specialist ensures that all cybersecurity architectures, risk management practices, standards, and operational controls align with enterprise IT strategies and DHS cybersecurity requirements. This role also involves conducting risk assessments, compliance audits, and forensic investigations in response to cyber incidents, while shaping the evolution of the program's security ecosystem.

Design and implement cybersecurity controls, architectures, and risk mitigation strategies that align with DHS policies and frameworks (e.g., NIST 800-53, RMF, FISMA). Develop tools and techniques for threat detection, incident response, and vulnerability remediation, including malware analysis and reverse engineering. Monitor networks and systems for security breaches, analyze logs and alerts, and investigate anomalies using modern forensic and analytical tools. Lead development and testing of disaster recovery and continuity of operations (COOP) plans to ensure mission resilience. Recommend and deploy secure hardware and software solutions; design and manage firewalls, encryption protocols, and access control measures. Contribute to enterprise-wide security awareness, training, and user education initiatives to promote a culture of cyber vigilance. Stay abreast of emerging technologies, threat vectors, and security trends; integrate findings into the security strategy. Provide expert guidance to program leadership on risk posture, mitigation priorities, and investment strategies in cybersecurity capabilities.

Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field. Experience can be substituted in lieu of bachelor's degree. Minimum of 8 years of progressively responsible experience in cybersecurity or information assurance. Extensive knowledge of cybersecurity frameworks and standards (e.g., NIST RMF, FISMA, FedRAMP). Demonstrated experience with security tools and platforms (e.g., SIEM, IDS/IPS, endpoint protection, forensics tools). Must be able to obtain and maintain a Top Secret/SCI security clearance. Must be able to obtain DHS EOD suitability. Start date will be established once EOD suitability has been received. This role performs onsite Monday - Friday from 9:00am - 5:00pm.