Information Assurance Engineer – Active Secret Clearance

CompQsoft; Fort Meade (MD); On-site; USD 110,000 - 170,000; Full time

Job summary

CompQsoft is seeking an Information Assurance (IA) Engineer to support the DISA program in Fort Meade, MD. The role focuses on vulnerability assessments, RMF processes, and remediation strategies across IT systems.

You will work with system engineers and cybersecurity staff to implement STIGs/SRGs, conduct ACAS/Nessus SCAP scans, and communicate findings to technical and non-technical stakeholders while ensuring audit readiness.

Qualifications

• Bachelor's degree in a Cybersecurity-related field and relevant certifications.
• Experience with vulnerability management processes and RMF/ATO sustainment.
• Strong communication skills to convey technical findings to diverse audiences.

Responsibilities

• Perform and analyze vulnerability assessments using ACAS and SCAP tools.
• Identify security risks and develop remediation strategies with engineers and administrators.
• Prioritize vulnerabilities by severity and mission impact, coordinating remediation.
• Prepare vulnerability assessment reports and executive-level briefings.
• Track vulnerabilities through remediation lifecycle and support RMF activities.

Skills

Analytical thinking

Troubleshooting

Written and verbal communication

Team collaboration

Vulnerability management mindset

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline

Tools

ACAS (Tenable/Nessus)

SCAP Compliance Checker

RMF documentation tools (eMASS)

DISA STIGs/SRGs knowledge

Tenable Security Center / Nessus Manager / Tenable.sc

PowerShell / Bash / Python scripting

Job description

CompQsoft is seeking an Information Assurance (IA) Engineer to support the DISA program in Fort Meade, MD. The role focuses on vulnerability assessments, RMF processes, and remediation strategies across IT systems.

You will work with system engineers and cybersecurity staff to implement STIGs/SRGs, conduct ACAS/Nessus SCAP scans, and communicate findings to technical and non-technical stakeholders while ensuring audit readiness.