Information Assurance Security Specialist

Accede LLC; Maple Grove (MN); On-site; USD 110,000 - 140,000; Full time

Job summary

Accede LLC seeks an experienced ISSO/Cybersecurity Engineer to support DoD information systems. You will implement and monitor security controls, manage RMF artifacts, and maintain ATO in collaboration with system admins and ISSMs.

The role requires 5+ years in info security, active secret clearance, and a DoD 8570-aligned CISSP/IAM III certification. Proficiency with Xacta/eMASS, STIGs, and vulnerability tooling is essential.

Qualifications

• 5+ years of experience in Information Systems Security or Cybersecurity.
• Experience implementing and monitoring technical, administrative, and operational security controls.
• Active Secret Clearance required.
• CISSP or IAM Level III certification (DoD 8570 compliant).
• Familiarity with NIST SP 800 series, CNSSI 1253, NISPOM Chapter 8, and DoD cybersecurity policies.
• Experience with STIGs, IAVAs, and SCAP/SCAP-enabled tools.

Responsibilities

• Implement, monitor, and maintain security controls across systems.
• Support RMF lifecycle including system authorization and continuous monitoring.
• Develop RMF documentation: SSPs, POA&Ms, SARs.
• Manage authorization packages using Xacta and/or DCSA eMASS.
• Apply STIGs and remediate IAVAs.
• Perform vulnerability assessments using SCC and review results.
• Review Windows event logs and investigate security incidents.
• Administer and secure Windows Server, Active Directory, and GPO.
• Ensure compliance with NIST SP 800 series, CNSSI 1253, NISPOM Chapter 8, and DoD policies.
• Collaborate with admins and ISSMs to maintain ATO.

Skills

Information Security

RMF

Cybersecurity

Vulnerability assessment

Security clearance

Education

CISSP

IAM Level III

DoD 8570 compliant

Tools

Xacta

DCSA eMASS

SCAP

Active Directory

Windows Server

Job description

We are seeking an experienced Information Systems Security Officer (ISSO) / Cybersecurity Engineer to support Department of Defense (DoD) information systems. The ideal candidate will have a strong background in Information Systems Security, Risk Management Framework (RMF), and security compliance, with experience implementing security controls, managing system authorizations, and ensuring compliance with DoD cybersecurity requirements.

Key Responsibilities:

• Implement, monitor, and maintain technical, administrative, and operational security controls.
• Support the Risk Management Framework (RMF) lifecycle, including system authorization and continuous monitoring.
• Develop and maintain RMF documentation, including SSPs, POA&Ms, and Security Assessment Reports (SARs).
• Manage and maintain authorization packages using Xacta and/or DCSA eMASS.
• Apply and validate DISA Security Technical Implementation Guides (STIGs) and remediate Information Assurance Vulnerability Alerts (IAVAs).
• Perform vulnerability assessments using SCAP Compliance Checker (SCC) and review vulnerability scan results.
• Review Windows security event logs and investigate security-related incidents.
• Administer and secure Microsoft Windows Server, Active Directory, and Group Policy Objects (GPO).
• Ensure compliance with NIST SP 800 series, CNSSI 1253, NISPOM Chapter 8, and DoD cybersecurity policies.
• Collaborate with system administrators, ISSMs, and security stakeholders to maintain Authority to Operate (ATO).

Required Qualifications:

5+ years of experience in Information Systems Security or Cybersecurity.

Experience implementing and monitoring technical, administrative, and operational security controls.

Active Secret Clearance is required.

CISSP or IAM Level III certification (DoD 8570 compliant).

Strong knowledge of the following publications and frameworks:

• NIST SP 800 series
• CNSSI 1253
• NISPOM Chapter 8 and related security publications
• Familiarity with Xacta and/or DCSA eMASS.
• Experience with Security Technical Implementation Guides (STIGs), Information Assurance Vulnerability Alerts (IAVAs), and SCAP Compliance Checker (SCC).
• Strong knowledge of Microsoft Windows Server, Active Directory, Group Policy Objects (GPO), and Windows System Administration.
• Experience reviewing Windows security event logs, vulnerability scanning