Information Assurance/ACAS Engineer

IPSecure, Inc.; San Antonio (TX); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Unlimited vacation

401(k) retirement plan

Education and certification reimburse

Paid federal holidays

Identity protection plan

Job summary

IPSecure is seeking an experienced Information Assurance (IA)/RMF Analyst to support DoD and U.S. Air Force cybersecurity operations at JBSA Lackland, San Antonio, TX. The candidate will execute RMF across the A&A lifecycle.

The ideal candidate will be proficient with ACAS (Nessus/Tenable.sc), vulnerability management, and security control assessment; responsible for SSPs, SARs, POA&Ms, and supporting evidence. Active TS/SCI clearance required.

Qualifications

• Hands-on RMF experience for DoD/federal systems.
• Experience developing RMF artifacts (SSPs, SARs, POA&Ms).
• Proficiency with ACAS/Nessus and vulnerability reports.

Responsibilities

• Execute and support RMF across the system authorization lifecycle.
• Develop and maintain RMF artifacts and documentation.
• Maintain SSPs, SARs, POA&Ms, and supporting evidence.
• Implement and document NIST SP 800-53 controls.
• Perform continuous monitoring to maintain posture and authorization.
• Operate ACAS/Nessus and manage scan zones, policies, credentials.
• Analyze vulnerability findings and coordinate remediation.
• Collaborate with ISSM, SCAs, system owners, and gov't personnel.

Skills

RMF execution

Vulnerability management

ACAS/Tenable

NIST SP 800-53

RMF documentation

Security control assessment

Stakeholder communication

Windows/Linux/network infra

Education

Bachelor's degree in IT/CS/Cybersecurity/IS/Engineering

Tools

ACAS

Nessus

Security Center/Tenable.sc

SCAP

Job description

Information Assurance/ACAS Engineer – TS/SCI Clearance Required – JBSA Lackland - San Antonio, TX

Job Description

IPSecure is seeking an experienced Information Assurance (IA)/Risk Management Framework Analyst to support Department of Defense and U.S. Air Force cybersecurity operations. The successful candidate will have hands‑on experience executing the Risk Management Framework (RMF) and supporting systems throughout the Assessment and Authorization (A&A) lifecycle.

The ideal candidate will be highly proficient with Assured Compliance Assessment Solution (ACAS) and experienced in vulnerability management, security control implementation and assessment, remediation tracking, and maintaining cybersecurity authorization documentation.

Job Responsibilities

• Execute and support the DoD Risk Management Framework (RMF) process throughout the system authorization lifecycle.


• Develop, review, and maintain RMF and Assessment & Authorization documentation and artifacts.


• Support the development and maintenance of System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), Risk Assessment Reports, and supporting evidence.


• Implement, assess, and document applicable NIST SP 800-53 security controls.


• Perform continuous monitoring activities to maintain system cybersecurity posture and authorization.


• Operate and maintain ACAS, including Nessus scanners, Security Center/Tenable.sc, repositories, scan zones, policies, and credentials as applicable.


• Configure and execute authenticated and unauthenticated vulnerability scans across Windows, Linux, network devices, and other supported infrastructure.


• Analyze ACAS vulnerability scan results to identify vulnerabilities, configuration deficiencies, false positives, and remediation requirements.


• Work with system administrators, network engineers, and system owners to develop and track vulnerability remediation activities.


• Review vulnerability findings and assist with determining operational and mission risk.


• Track remediation activities and validate corrective actions through rescanning and supporting evidence.


• Support STIG/SRG compliance, security configuration assessments, and vulnerability management activities.


• Review and respond to applicable cybersecurity directives, vulnerability notifications, and compliance requirements.


• Prepare cybersecurity documentation and evidence for security control assessments, authorization decisions, inspections, and audits.


• Coordinate with ISSM, Security Control Assessors (SCAs), system owners, engineers, and government cybersecurity personnel.


• Maintain accurate cybersecurity records and provide status reporting on vulnerabilities, POA&Ms, compliance, and authorization activities.

Basic Qualifications

Security Clearance: Active TS/SCI

Education: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or related discipline. Equivalentexperiencemay be substituted.

Certification: Candidate must meet applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned position.

Experience:

• 3+ years of Information Assurance, cybersecurity, or RMF experience supporting DoD or federal information systems.


• Demonstrated hands‑on experience with the DoD Risk Management Framework (RMF).


• Proven working knowledge of NIST SP 800-53 security controls and RMF documentation requirements.


• Proficiency with ACAS/Tenable, including vulnerability scanning, analysis, reporting, and remediation validation.


• Experience with STIGs, SCAP, vulnerability management, and security compliance assessments.


• Experience developing or maintaining RMF authorization packages and supporting artifacts.


• Ability to analyze technical vulnerability findings and communicate remediation requirements to system administrators and engineers.


• Experience supporting Windows, Linux, network, or enterprise infrastructure environments.


• Proven written and verbal communication skills.


• Ability to work collaboratively within a government/contractor integrated team environment.

Preferred Qualifications

Certifications: CISSP, GSLC, GIAC certifications or other applicable DoD 8140 qualifications, or CCSP certification

Medical, Dental, Vision, Unlimited Vacation, Sick Leave, Paid Federal Holidays, Education and Certification Reimbursement Program, 401(k) retirement plan with safe harbor employer match after 3 months, Prepaid Legal Plan and Identity Protection Plan available, Accident Insurance, Critical Illness Insurance, and Hospital Indemnity Insurance available.

EEOC Statement

IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

IPSecure is an Equal Opportunity Affiant Employer. EOE, Minorities, Females, Vet, Disabled, Sexual Orientation, Gender Identity or any other protected class. All qualified job seekers are encouraged to apply. IPSecure is committed to America's veterans by providing opportunities for them to continue contributing after service to our nation. We also work to provide reasonable accommodations to individuals with disabilities.
EEO Is The Law

Disability Accessibility Accommodation

If you have a disability and require assistance with our online application process, please tell us how we can help.
E-mail [e-mail] or call 210-877-1111.

Note:

Pay Transparency - The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.