Senior Information Assurance Security Specialist

DecisionPoint Corporation; Elizabeth City (NC); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading company is seeking a Senior Information Assurance Security Specialist to protect sensitive data and support the USCG's mission. The role involves conducting security assessments, developing policies, and responding to incidents. Candidates must have an active SECRET Clearance and relevant experience in security tools and methodologies.

Qualifications

• Active SECRET Clearance required.
• Five years of experience with vulnerability scanning tools and security assessment methodologies.

Responsibilities

• Responsible for protecting sensitive data by identifying and mitigating security risks.
• Conduct regular security assessments and vulnerability scans.

Skills

Vulnerability Scanning

Network Security

Incident Response

Risk Management

Education

Bachelor’s or Associate Degree in Computer Science

IT Certification

Tools

Active Directory

UNIX

RHEL

Windows

Relational Databases

Job description

Overview

DecisionPoint Corporation is seeking a Senior Information Assurance Security Specialist to join our team on an upcoming contract to support the Unites States Coast Guard USCG) Aviation Logistics Center (ALC) Information Systems Division (ISD) in Elizabeth City, North Carolina. The USCG ALC ISD provides development, security, and operations (DevSecOps) IT support for products and services for the Coast Guard Information Officer (CIO), Commandant, and Coast Guard Cyber Command through a geo-dispersed workforce including military, civilians, an contractor personnel committed to supporting the USCG’s missions and requirements of the leading growing interconnectivity, increased reliance on data and networks, and development of commercial space and artificial intelligence systems.

Position is on-site with off-site capabilities.

Duties & Responsibilities

The duties and responsibilities of the Senior Information Assurance Security Specialist include:

• Responsible for protecting an organization's sensitive data by identifying, analyzing, and mitigating security risks across IT systems, networks, and applications; this includes developing and implementing security policies, conducting vulnerability assessments, monitoring for threats, responding to incidents, and ensuring compliance with relevant regulations, all while maintaining the confidentiality, integrity, and availability of information.
• Conduct regular security assessments to identify potential vulnerabilities in systems and networks.
• Analyze security risks and prioritize mitigation strategies based on impact and likelihood.
• Develop and maintain risk management plans to address identified security vulnerabilities.
• Define and enforce information security policies and procedures aligned with industry best practices and regulatory requirements.
• Develop security standards for data access, encryption, password management, and system configurations.
• Monitor network activity for suspicious behavior and potential security breaches.
• Investigate security incidents, including data breaches, to determine root cause and impact.
• Implement appropriate response actions to contain and remediate security incidents.
• Conduct internal audits to assess security posture and identify areas for improvement.
• Conduct regular vulnerability scans to identify system weaknesses and potential exploits.
• Stay updated on emerging threats and security trends to proactively address vulnerabilities.

Qualifications

• Active SECRET Clearance required.
• Bachelor’s or associate degree in Computer Science, Math, Information Technology, Engineering, or related field or at minimum IT Certification.
  • Note: Five (5) years' experience is equivalent to five (2) years of education.
• Five (5) years of experience in experience with vulnerability scanning tools and security assessment methodologies.
• Five (5) years of experience with network security, firewall management, intrusion detection/prevention systems (IDS/IPS).
• Five (5) years of experience with Security Information and Event Management (SIEM).
• Five (5) years of experience in the risk management framework.
• Basic knowledge of the following: Active Directory, UNIX, RHEL, Windows, Relational Databases.

Our Equal Employment Opportunity Policy

• EEO and Affirmative Action Policy:DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
• Pay Transparency Policy:In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
• Authorization to Share Resume and Personal Information:By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.