Information Assurance Specialist

Position Summary The Information Assurance Specialist serves as a senior ISSO / cybersecurity professional supporting the five program portfolios. This role is responsible for ensuring the confidentiality, integrity, and availability of systems (traditional, cloud-native AWS, and authorized SaaS), driving RMF/CSRMC activities, and supporting continuous authorization (cATO) in a DevSecOps environment.

Key Responsibilities

Provide ISSO support across assigned systems.

Lead operationalization of the Risk Management Framework / Cybersecurity Risk Management Construct (CSRMC) within cloud-native and DevSecOps frameworks.

Implement and assess security controls, manage control inheritance, and maintain near real-time body of evidence in eMASS.

Support categorization, selection/tailoring of controls, POA&M lifecycle management, and continuous monitoring.

Monitor security posture in CI/CD pipelines (SAST/DAST, SCA, container scanning) and collaborate with development teams on remediation.

Develop and maintain RMF control family plans, Security Assessment Plans (SAPs), and other authorization artifacts.

Support incident response activities for cloud-native systems and act as security liaison with SaaS providers.

Perform control self-assessments according to the continuous monitoring and ATO schedule.

Required Qualifications

Active SECRET clearance.

Bachelor’s degree from an accredited institution in Information Technology, Computer Science, Engineering, or related technical discipline.

Current DoD 8570/8140 certification meeting IAM Level II or IAT Level II baseline requirements (e.g., CISSP, Security+ CE, CISM, CASP+ CE).

Five (5) years of dedicated Information Assurance experience, with at least three (3) consecutive years relevant to the tasks and demonstrating recent (within the last year) hands-on understanding of the DoD cybersecurity environment.

Flexible work from home options available.