Information Assurance Specialist

RMC - Resource Management Concepts Inc.; Dahlgren (VA); Hybrid; USD 90,000 - 145,000; Full time

Benefits offered by this job

Healthcare plans

401K plan

Job summary

Resource Management Concepts, Inc. (RMC) in Dahlgren, VA is seeking an Information Assurance Specialist to support our government customer and sustain secure IT operations under RMF/C&A processes.

The candidate will manage cyber risk, perform STIG reviews, coordinate with ACAS/eMASS, develop POAMs, and maintain DoD cybersecurity documentation. A TS clearance is required; hybrid work is offered along with healthcare and retirement benefits.

Qualifications

• Active TS clearance required to start.
• DoD RMF/C&A experience and documentation.
• STIGs knowledge and vulnerability remediation experience.
• Experience with ACAS, eMASS, and related security tooling.
• Strong understanding of DoD cybersecurity requirements.

Responsibilities

• Assist with development of cyber security documentation for RMF/C&A.
• Provide cybersecurity oversight to attain and maintain ATOs.
• Ensure compliance with DoD and DON cybersecurity requirements.
• Develop POAMs in response to vulnerabilities.
• Review vulnerability and compliance scanning (ACAS/eMASS).
• Develop, review, and maintain mitigation statements for vulnerabilities.
• Run security logs and implement RMF/C&A standards.
• Prepare Annual/Quarterly Security Reviews and eMASS packages.
• Utilize Visio for network diagrams and update SOPs.

Skills

RMF process

C&A documentation

Vulnerability remediation

STIGs knowledge

Threat analysis

Education

High School Diploma

CompTIA Security+ CE

IAM Level II (CASP+ CE, CISM, CISSP or Associate)

Tools

ACAS

eMASS

STIG Manager

Visio

Job description

Position Title: Information Assurance Specialist

Location: Dahlgren, Virginia, United States

Department: Information Technology

Work Type: Full time

Workplace Type: Hybrid

Description

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring an Information Assurance Specialist to support our customer in Dahlgren, VA.

Roles and Responsibilities:

• Assist with the development of systems Cybersecurity documentation to support certification of compliance with applicable standards.
• Provide Cybersecurity oversight, direction, and guidance in support of attaining and maintaining ATOs through the Risk Management Framework (RMF) process.
• Ensure compliance with DoD and DON Cybersecurity compliance requirements.
• Ensure the uninterrupted delivery of information technology systems.
• Support current and ongoing C&A packages.
• Develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities.
• Develop, review, and maintain mitigation statements for new and current security vulnerabilities.
• Review vulnerability and compliance scanning of all Navy Command networks and services using the current DoD Assured Compliance Assessment Solutions (ACAS) or other government solutions.
• Respond to Information Assurance Vulnerability Alerts (IAVAs) as necessary to address systems vulnerabilities.
• Run and review systems security utilization logs per Cybersecurity standards.
• Implement and support Cybersecurity standards to include NIST and Risk Management Framework (RMF) C&A Standards.
• Perform regular security systems scans and maintain records of such scans, as required by Cybersecurity guidelines.
• Assist in the preparation of Annual Security Review (ASR), Quarterly Security Review (QSR), and eMASS packages.
• Deploy Evaluate-STIG to all assets on the network to view results of applicable STIGs on every asset to ensure compliance.
• Utilize Visio to develop, update and maintain network diagrams.
• Review, update, validate and author Cybersecurity procedures (SOPs).
• Review and maintain an inventory of authorized software.
• Audit and validate configurations deployed on Laptops, Workstations, and Servers.
• Audit and validate configuration of network devices, systems, and applications based on DISA STIGs.
• Monitor, review, and report on data restoration capabilities.

Requirements

• Active TS (DoD TOP SECRET clearance) is required to start.
• H.S. Diploma or equivalent.
• CompTIA Security+ CE (IAT Level II) certification. Must be current and active.
• IAM Level II (Information Assurance Management) or higher: (CASP+ CE, CISM, CISSP or Associate) within 60 days of start.
• Three (3) years' experience in INFOSEC (Information Security) Management, preferably in a DoD environment.
• Two (2) years' experience with Navy RMF (Risk Management Framework) process and POA&M tracking and resolution.
• Two (2) years' experience with ACAS system vulnerability scanning through eMASS.
• Master knowledge of the Navy’s Security Assessment and Authorization (SAA) policy.
• Demonstrated competency in vulnerability remediation.
• Demonstrated competency in creating mitigation statements.
• Experience in VRAM compliance maintenance.
• Experience performing DoD Security Technical Implementation Guides (STIGs).
• Experience importing STIG checklist files into the STIG Manager.
• Experience with creating and maintaining Annual and Quarterly Security Reviews.
• Experience with RMF A&A process including document preparation and submission.

Benefits

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience and certifications that will take your career to the next level. RMC also offers high-quality, low-deductible healthcare plans and a competitive 401K package.

"Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $90,000 to $145,000 annually."

Equal employment opportunity, including veterans and individuals with disabilities.