Information Systems Security Specialist III

Strategic Resilience Group LLC; Virginia Beach (VA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking an Information Systems Security Specialist III to join their team. This on-site role in Virginia Beach requires a strong background in security assessments and compliance, with a focus on STIG evaluations and vulnerability assessments. The ideal candidate will have extensive experience in RMF activities and hold a DoD Secret security clearance. If you're passionate about enhancing security measures and ensuring compliance with federal standards, this position offers an exciting opportunity to make a significant impact in a vital field.

Qualifications

• 10+ years of experience in RMF activities or 15 years with no degree.
• DoD Approved 8570 Baseline Certification required.

Responsibilities

• Conduct STIG assessments and evaluate compliance with security standards.
• Manage security authorization and compliance tracking within eMASS.

Skills

STIG assessments

SCAP benchmarks

vulnerability assessments

compliance tracking

risk mitigation

Education

Bachelor's degree in Information Systems

Master's degree in IT or Computer Science

Tools

ACAS

eMASS

Job description

Information Systems Security Specialist III

Join us as an Information Systems Security Specialist III at Strategic Resilience Group LLC. This position is contingent upon funding, with an expected start date of December 2025. SECRET clearance is required.

Position Overview

SRG is seeking an Information System Security Engineer (ISSE) to perform STIG assessments using SCAP benchmarks, conduct vulnerability assessments with ACAS, manage compliance tracking in eMASS, develop POA&Ms, and complete RMF Step 5 authorizations. This is an on-site role based in Virginia Beach, VA, with no telework options.

Responsibilities

• Conduct Security Technical Implementation Guide (STIG) assessments using SCAP benchmarks and evaluate compliance with security standards.
• Perform vulnerability assessments using ACAS.
• Manage security authorization and compliance tracking within eMASS.
• Develop and maintain Plans of Action and Milestones (POA&Ms).
• Complete RMF Step 5 authorizations in an ISSE capacity.
• Advise stakeholders on risk mitigation and security enhancements.
• Ensure compliance with DoD 8570.01-M and DFARS 252.239-7001.

Qualifications

• Active DoD Secret security clearance.
• Bachelor’s degree in Information Systems, IT, Computer Science, or related field.
• Minimum 10 years of experience in RMF activities, or 8 years with a master's degree; 15 years of documented experience can substitute for a degree.
• DoD Approved 8570 Baseline Certification: CISM, CISSP (or Associate), CCISO, or GSLC.

Application Process

Interested candidates can apply by submitting their resume, cover letter, and providing optional demographic data. The application will be reviewed, and candidates will be contacted for further steps.