Information Assurance II

BRS; San Antonio (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Paid holidays

Medical, dental and vision insurance

401(k) with company match

Job summary

Vista Global Solutions, LLC (VGS) seeks an Information Assurance/Specialist II to support Joint Base San Antonio. You will perform RMF/ATO activities, conduct risk assessments, and assist in C&A documentation while coordinating with the ISSM and IAM to ensure DoD compliance.

Role requires background checks, Secret clearance/Tier 3 in support of duty assignment onsite, and certification requirements (IAT II). A Bachelor’s degree or equivalent experience is required.

Qualifications

• Experience performing RMF/ATO activities and managing security controls.
• Bachelor’s degree or higher required; Security+ or equivalent preferred.

Responsibilities

• Provide risk assessments and security reviews for systems to be deployed on JBSA.
• Assist in creating and updating ATO/C&A documentation and POA&Ms.
• Follow NIST RMF standards and support ISSM/ISSO activities.

Skills

RMF/ATO experience

Incident response

Vulnerability management

Education

Bachelor's degree or equivalent

IAT II certification

Security+ certification

Tools

Retina

AppDetective

ACAS

Job description

Vista Global Solutions, LLC (VGS) is a government contracting and consulting firm supporting several federal agencies and military installations across the U.S. We are seeking an Information Assurance/Specialist Lvl. II to join our ongoing mission at Joint Base San Antonio.

What You'll Do:

• Provide risk assessments and reviews for software and hardware to be deployed on the JBSA sites.
• Promptly report any suspected or confirmed security breaches or policy violations to the agency’s IA Manager (IAM).
• Address security incidents and remediate vulnerabilities that are within the DHA address IP space that belong to neighboring networks.
• Ensure systems will be Information Assurance and Security Compliant with all current configurations in accordance with DHA RMF accredited baselines
• Perform a Basic Cyber Assessment, using the NIST SP 800-171 DoD Assessment Scoring Template, and enter the results electronically in Supplier Performance Risk System (SPRS) for each covered Contractor information system that is relevant to an offer, contract, task order, or delivery order
• Analyze and improve system security practices
• Assist the system owner and ISSO in various aspects of designing, developing, and writing certification and accreditation (C&A) documentation packages, including support of the ATO and its systems and/or environment, including but not limited to POA&M and other artifacts.
• Follow National Institute of Standards and Technology (NIST) and/or RMF standards in performance of job functions
• Administer the Government Mission Assurance Category (MAC) Three (MAC3) and Government MAC Two (MAC2); Sensitive but Unclassified office automation environment security features, including but not limited to, access control, malicious code protection, vulnerability and patch management, audit logs and records management, attack sensing and warning for all supporting network, computing, and information components
• Administer and support DOD, MHS, and DHA IA security compliance reviews including ad-hoc, annual, and quarterly scans, security information requests and certification and accreditation activities
• Administer and support security reviews of all new or modified systems, devices, and configurations to ensure a consistent security posture
• Administer all security related documentation including System Security Authorization Agreements (SSAA), recording mitigation strategies, waivers, approvals, ports and protocol registration, and user rights tracking
• Assist in the detailed investigation and documentation of security incidents as required
• Support the Government’s directive to maintain and sustain all aspects of CAC login and PKI technology and/or other Government authorized or required two factor identification protocol or system
• Maintain application approval databases and user rights forms
• Utilize Government scanning tools, such as Retina, AppDetective, and Assured Compliance Assessment Solution (ACAS) and or Government provided security protocols, including forensics analysis and Intrusion Prevention System
• Assist Information Systems Security Manager (ISSM) in meeting their duties and responsibilities
• Implement and enforce all DoD IS and PIT system cybersecurity policies and procedures, as defined by cybersecurity-related documentation
• Ensure that all users have the requisite security clearances and access authorization, and are aware of their cybersecurity responsibilities for DoD IS and PIT systems under their purview before being granted access to those systems
• Coordinate with the ISSM to initiate protective or corrective measures when a cybersecurity incident or vulnerability is discovered and ensure that a process is in place for authorized users to report all cybersecurity-related events and potential threats and vulnerabilities to the ISSO
• Ensure that all DoD IS cybersecurity-related documentation is current and accessible to properly authorized individuals

What You Bring:

This position is pending a background check for Secret Clearance)/ Tier 3 in support of your primary duty assignment onsite.

3 yrs experience in RMF/ATO

Certification requirements to meet IAT II, IAM III. Education requirements are a Bachelor’s degree or equivalent experience and IAT II certifications (Sec+)

What We Offer:

VGS offers a competitive benefits package to include: paid holidays, paid time off including sick and vacation leave, medical, dental and vision insurance, flexible spending accounts, short and long term disability, company paid life insurance, 401(k) with a company match and discretionary profit sharing and tuition reimbursement