Information System Security Specialist III

DirectViz Solutions, LLC; Virginia Beach (VA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive medical benefits

401(k) match

Generous PTO accrual

Professional development reimbursement

Corporate-funded technology certifications

Job summary

DirectViz Solutions, LLC is actively searching for an experienced Information System Security Specialist III to join our team in Virginia Beach, VA. The position emphasizes supporting Risk Management Framework (RMF) activities, conducting vulnerability assessments, and developing security compliance documentation for Department of Defense systems.

We prioritize our employees, offering competitive compensation, benefits, and professional development opportunities. Candidates must have at least five years of relevant experience, hands-on RMF experience, and robust communication skills.

Qualifications

• Minimum of five years of experience performing RMF activities.
• Demonstrated experience performing STIG assessments.
• Hands-on experience conducting vulnerability assessments using ACAS.

Responsibilities

• Support and execute RMF activities for DoD information systems.
• Perform STIG assessments using compliance validation tools.
• Manage and maintain RMF documentation within eMASS.

Skills

Risk Management Framework (RMF)

Vulnerability Assessment

STIG Assessments

SCAP benchmarks

Communication Skills

Education

Certification as 461 or equivalent

Tools

Enterprise Mission Assurance Support Service (eMASS)

Assured Compliance Assessment Solution (ACAS)

Job description

DirectViz Solutions (DVS) is a dynamic and rapidly growing government contractor committed to delivering innovative IT solutions that address the mission-critical needs of our government clients. Through the expertise and dedication of our talented team, we provide cutting-edge technology services designed to achieve success and exceed expectations.

At DVS, we prioritize our employees as our greatest asset. We offer competitive compensation, comprehensive medical benefits, a 401(k) match, generous PTO accrual, professional development reimbursement, corporate-funded technology certifications, and robust employee recognition and appreciation programs.

Information System Security Specialist III

If you are passionate about cybersecurity, risk management, and protecting mission-critical systems, this is an opportunity to join a dynamic team supporting complex Department of Defense environments. We are seeking an experienced Information System Security Specialist III to support Risk Management Framework (RMF) activities, vulnerability management, compliance initiatives, and security authorization efforts across enterprise systems.

Key Responsibilities

• Support and execute Risk Management Framework (RMF) activities for DoD information systems.
• Perform Security Technical Implementation Guide (STIG) assessments using SCAP benchmarks and other compliance validation tools.
• Conduct vulnerability assessments utilizing Assured Compliance Assessment Solution (ACAS).
• Manage and maintain RMF documentation and activities within eMASS.
• Develop, track, and maintain Plans of Action and Milestones (POA&M) entries.
• Support RMF Step 5 authorization activities while functioning in an Information System Security Engineer (ISSE) capacity.
• Analyze cybersecurity risks and provide mitigation and risk reduction recommendations to stakeholders and leadership.
• Collaborate with engineers, system administrators, and cybersecurity teams to ensure systems remain compliant with DoD cybersecurity requirements and security controls.
• Assist with continuous monitoring, security posture assessments, and remediation efforts.

Required Qualifications

• Minimum of five (5) years of experience performing Risk Management Framework (RMF) activities.
• Demonstrated experience performing STIG assessments, including the use of SCAP benchmarks.
• Hands‑on experience conducting vulnerability assessments using ACAS.
• Experience utilizing Enterprise Mission Assurance Support Service (eMASS).
• Experience developing and managing POA&M entries.
• Experience completing RMF Step 5 authorization activities in an ISSE capacity.
• Strong communication skills with the ability to present cybersecurity risks and remediation recommendations to technical and non‑technical stakeholders.

Certifications & Clearance Requirements

• Minimum certification as 461 (or equivalent as required by the applicable Technical Instruction) at the Intermediate level in accordance with DoDD 8140.01 or successor policy.
• Must maintain a final adjudicated Tier 5 security investigation with an IT Level I designation in JPAS and/or DISS for all Privileged User responsibilities.
• Active Secret Clearance required; Top Secret eligibility may be required depending on program needs.
• U.S. Citizenship required.

Preferred Skills

• Familiarity with NIST RMF, NIST SP 800‑53, and DoD cybersecurity compliance standards.
• Experience supporting security authorization packages within DoD environments.
• Knowledge of vulnerability remediation processes and continuous monitoring practices.
• Ability to work independently while supporting cross‑functional technical teams.

Work Location

Virginia Beach, VA

Physical and Mental Qualifications

• Maintain focus and awareness throughout scheduled working hours.
• Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.
• Lift and move objects weighing up to 15 pounds as needed.
• Exhibit excellent verbal and written communication skills, with a strong command of the English language.
• Demonstrate the ability to work independently while also collaborating effectively as part of a team.
• Quickly learn and retain routine tasks and processes.
• Possess strong organizational skills, attention to detail, business correspondence proficiency, and self‑management capabilities.
• Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.
• Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

DirectViz Solutions, LLC (DVS) is an equal opportunity employer who prohibits discrimination and harassment against any employee or applicant for employment based on race, sex (including pregnancy), age, gender identity, creed, religion, national origin, sexual orientation, marital status, genetic information, disability, political affiliation, protected veteran status, or any other status protected by federal, state or local law.

DVS has a zero‑tolerance policy for harassment, threats, coercion, discrimination, and intimidation. Employees may file a complaint or exercise any right protected by Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, as amended, Section 4212 of the Vietnam Era Veterans Readjustment Assistance Act of 1974, or the Veterans Employment Opportunities Act of 1998.