Information Assurance Specialist I

AMERICAN SYSTEMS; Monterey (CA); On-site; USD 55,104 - 60,614; Full time

Job summary

AMERICAN SYSTEMS is hiring an Information Assurance Specialist I in Monterey, CA. The role supports cybersecurity and compliance, ensuring information systems meet RMF and federal security requirements, and maintaining ATO through continuous monitoring.

You will work with system owners and security stakeholders to audit controls, analyze logs, load artifacts in eMASS, tailor RMF controls, and draft POA&Ms and risk reports. Requires DoW 8570 IAM II and 2+ years in cybersecurity.

Qualifications

• U.S. citizenship per 8 U.S.C. 1324b(a)(2)(C).
• Active DoW Secret Clearance required.
• Associate degree or higher in IT, Cybersecurity, Information Assurance, or related field; or 1–2 years of relevant experience.
• DoW 8570.01-M IAM Level II certification required.
• Two or more years in cybersecurity with A&A experience.
• Experience with RMF, NIST and CNSSI controls.
• Hands-on eMASS experience and RMF documentation (SSP, CCB, COOP).
• Familiarity with RMF controls and CT&E testing procedures.

Responsibilities

• Support cybersecurity and compliance activities to meet federal security requirements.
• Maintain Authority to Operate (ATO) through ongoing monitoring.
• Manage RMF artifacts, baselines, and documentation; load into eMASS.
• Tailor and select RMF controls; develop POA&Ms and risk reports.
• Conduct independent reviews, testing, and assessments for RMF progression.
• Review CT&E test plans and procedures to ensure coverage of IA requirements.

Skills

A&A experience

RMF knowledge

NIST CNSSI familiarity

eMASS proficiency

CT&E test procedures understanding

Visio diagram skills

Education

Associate degree or higher in IT / Cybersecurity / Information Assurance

Tools

eMASS

Visio

Job description

Information Assurance Specialist I

Overview

Now Hiring at AMERICAN SYSTEMS

Epsilon, Inc. has joined AMERICAN SYSTEMS! As one organization, we offer expanded resources, streamlined operations, and increased opportunities for growth and development.

Join us to be part of a dynamic, collaborative environment dedicated to innovation and customer success.

Responsibilities

An Average Day: As the Information Assurance Specialist I you will support cybersecurity and compliance activities by ensuring information systems meet federal security requirements, maintain operational authorizations, and comply with standards such as the Risk Management Framework. You will work closely with system owners, administrators, and security stakeholders to:

• Audit systems, SOPs, and security checklists.
• Review and analyze audit logs for compliance with STIGs and IAVAs.
• Support Authorization to Operate (ATO) requirements through ongoing compliance monitoring.
• Manage system configuration baselines and documentation.
• Ensure compliance with RMF requirements, including media sanitization, contingency planning, incident response, insider threat policies, and ISAs/SLAs.
• Monitor cloud provider security controls, including FedRAMP-authorized environments.
• Create and modify required artifacts for RMF Steps 1-5.
• Conduct independent reviews, testing, and assessment of all information, artifacts, and other relevant data pertaining to systems progressing through RMF.
• Load artifacts into eMASS.
• Select and tailor controls in eMASS.
• Develop Plan of Actions and Milestones (POA&Ms) / Risk Assessment Reports (RARs), and automated scan reviews.
• Responsible for Certification Test and Evaluation (CT&E) system's compliance with all applicable Information Assurance Controls (IACs) for an assigned system, including developing the appropriate test procedures, executing the test procedures, and accurately documenting the results of security testing.
• Review CT&E test plans and procedures to ensure the test plan addresses level of effort and validates all IA requirements.

Qualifications

• All candidates must be a U.S. Citizen in accordance with 8 U.S.C. 1324b(a)(2)(C).
• Must hold an active DoW Secret Clearance.
• Associate degree or higher in IT, Cybersecurity, Information Assurance, or related field; or 1-2 years of relevant professional experience.
• Dept. of War (DoW) 8570.01-M, IAM Level II certification required.
• Two (2) or more years of experience in the cybersecurity field.
• Experience with assessment and authorization (A&A).
• Experience with assessing and validating RMF, NIST, and CNSSI security controls.
• Hands‑on experience with eMASS.
• Visio diagram creation and modification.
• RMF documentation creation and modification (SSP, CCB, COOP, etc.).
• Familiarity with NIST 800-53 controls.
• Ability to provide security assessment reports that cover risks the client should be aware of and mitigate risk with residual remaining risks.

Compensation

Salary range: USD $40.00/Hr. - USD $44/Hr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.

EEO Statement

EEO Race/Sex/Disability Status/Veteran Status