Senior Information Assurance Analyst

ValidaTek, Inc.; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

ValidaTek, Inc. seeks a Senior Information Assurance Specialist to safeguard a DHS-affiliated program. You will design, develop, and implement advanced cybersecurity methodologies, tools, and policy frameworks to protect critical systems and data.

The role covers risk assessments, compliance audits, and investigations while shaping the program’s security ecosystem. Onsite in Washington, DC area, with opportunities to influence enterprise IT security strategy.

Qualifications

• Bachelor’s degree in CS, InfoSec, Eng, or related field.
• Minimum 8 years of cybersecurity/information assurance experience.
• Extensive knowledge of NIST RMF, FISMA, FedRAMP.
• Experience with SIEM, IDS/IPS, endpoint protection, forensics tools.
• Must maintain Top Secret clearance and DHS EOD suitability.
• Onsite Monday–Friday 9:00am–5:00pm.

Responsibilities

• Design and implement cybersecurity controls, architectures, and risk mitigation aligned with DHS policies (NIST 800-53, RMF, FISMA).
• Develop tools for threat detection, incident response, and vulnerability remediation (malware analysis, reverse engineering).
• Monitor networks and systems for security breaches; analyze logs and investigate anomalies with forensic tools.
• Lead development and testing of disaster recovery and COOP plans to ensure mission resilience.
• Recommend and deploy secure hardware/software solutions; manage firewalls, encryption, and access controls.
• Contribute to security awareness, training, and user education to promote cyber vigilance.
• Stay abreast of emerging technologies, threats, and trends; integrate findings into security strategy.
• Provide guidance to leadership on risk posture, priorities, and cybersecurity investments.

Skills

Cybersecurity frameworks

8+ years experience

Risk assessment

Security incident response

Top Secret clearance

Education

Bachelor’s degree in CS/InfoSec/Engineering

Tools

SIEM

IDS/IPS

Endpoint protection

Forensics tools

Job description

At ValidaTek, we modernize and optimize IT services to solve some of the most critical challenges facing federal civilian and defense agencies. From customers to partners to top-talent employees, ValidaTek puts people first, empowering them to exceed expectations and transform government organizations. Our success starts and ends with our people, so we built a company where great people can do great things, with the resources and autonomy to make decisions that transform organizations. We operate as one team of diverse people, united by a passion for continuous growth and optimization. Our commitment to quality and performance optimization is the reason why our IT Service Projects and New Development Projects have been appraised at CMMI Maturity Level 5, positioning us as one of a handful of elite companies to receive the highest form of third-party validation. www.validatek.com

Summary

The Senior Information Assurance Specialist plays a pivotal role in safeguarding the cybersecurity posture of a DHS-affiliated program. This position is responsible for designing, developing, and implementing advanced cybersecurity methodologies, tools, and policy frameworks to ensure the confidentiality, integrity, and availability of critical systems and data. Core responsibilities include intrusion detection and prevention, secure software/system design, reverse engineering, vulnerability assessments, and data protection strategies.

The Specialist ensures that all cybersecurity architectures, risk management practices, standards, and operational controls align with enterprise IT strategies and DHS cybersecurity requirements. This role also involves conducting risk assessments, compliance audits, and forensic investigations in response to cyber incidents, while shaping the evolution of the program’s security ecosystem.

Responsibilities

• Design and implement cybersecurity controls, architectures, and risk mitigation strategies that align with DHS policies and frameworks (e.g., NIST 800-53, RMF, FISMA).
• Develop tools and techniques for threat detection, incident response, and vulnerability remediation, including malware analysis and reverse engineering.
• Monitor networks and systems for security breaches, analyze logs and alerts, and investigate anomalies using modern forensic and analytical tools.
• Lead development and testing of disaster recovery and continuity of operations (COOP) plans to ensure mission resilience.
• Recommend and deploy secure hardware and software solutions; design and manage firewalls, encryption protocols, and access control measures.
• Contribute to enterprise-wide security awareness, training, and user education initiatives to promote a culture of cyber vigilance.
• Stay abreast of emerging technologies, threat vectors, and security trends; integrate findings into the security strategy.
• Provide expert guidance to program leadership on risk posture, mitigation priorities, and investment strategies in cybersecurity capabilities.
• Knowledge: Contributes to and shapes advanced cybersecurity concepts, frameworks, and standards. Applies deep subject matter expertise to evolving challenges.
• Problem Solving: Develops innovative solutions to complex, high-impact cyber threats and architectural challenges.
• Discretion/Latitude: Operates with broad autonomy; defines goals, priorities, and methodologies with minimal oversight.
• Impact: Decisions and recommendations directly influence the security, continuity, and regulatory compliance of mission-critical DHS operations.
• Liaison/Leadership: Serves as a trusted technical advisor to program and agency leadership. May lead cybersecurity projects, task orders, or cross-functional teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field. Experience can be substituted in lieu of bachelor's degree.
• Minimum of 8 years of progressively responsible experience in cybersecurity or information assurance.
• Extensive knowledge of cybersecurity frameworks and standards (e.g., NIST RMF, FISMA, FedRAMP).
• Demonstrated experience with security tools and platforms (e.g., SIEM, IDS/IPS, endpoint protection, forensics tools).
• Must be able to maintain a Top Secret security clearance.
• Must be able to obtain DHS EOD suitability. Start date will be established once EOD suitability has been received.
• This role performs onsite Monday - Friday from 9:0am - 5:00pm.

Salary Disclosure

Actual salary will be based on a variety of factors including but not limited to experience, geographic location, contract affordability, internal equity, education, and certifications.

The upper end of the salary range may be reserved for individuals who have demonstrated tenure with the company, seniority, and proven excellent performance. This includes factors such as education, certifications, and extensive/unique experience beyond what is required.

EEO Statement

ValidaTek is an Equal Opportunity Employer. All qualified applicants will be considered without regard to disability, protected veteran status, or any other status protected by federal, state, or local laws.

Applicants who are selected for employment will be required to verify authorization to work in the United States.

Offers of employment will be contingent upon passing a post-offer background check.