TS/SCI Information Assurance & ACAS RMF Engineer

IPSecure; Chicago (IL); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Education Reimbursement

Certification Reimbursement

Unlimited Vacation

Paid Holidays

Job summary

IPSecure is seeking an experienced Information Assurance/RMF Analyst to support DoD and USAF cyber operations. You will execute RMF across the A&A lifecycle, manage ACAS/Tenable scanners, and prepare SSPs, SARs, and POA&Ms.

Collaboration with system owners and engineers is essential to maintain authorization and compliance. The role requires hands-on RMF experience, proficiency with ACAS/Tenable, STIG/SRG familiarity, and strong communication skills.

Qualifications

• 3+ years of Information Assurance, cybersecurity, or RMF experience.
• Hands-on RMF experience with DoD or federal information systems.
• Proven knowledge of NIST SP 800-53 security controls and RMF documentation requirements.
• Proficiency with ACAS/Tenable, including vulnerability scanning, analysis, reporting, and remediation validation.
• Experience with STIGs, SCAP, vulnerability management, and security compliance assessments.
• Experience developing or maintaining RMF authorization packages and supporting artifacts.
• Ability to analyze technical vulnerability findings and communicate remediation requirements to system administrators and engineers.
• Experience supporting Windows, Linux, network, or enterprise infrastructure environments.
• Strong written and verbal communication skills; ability to work in a government/contractor team.

Responsibilities

• Execute and support the DoD RMF process throughout the system authorization lifecycle.
• Develop, review, and maintain RMF and Assessment & Authorization artifacts.
• Support SSPs, SARs, POA&Ms, risk assessments, and supporting evidence.
• Implement and document applicable NIST SP 800-53 controls.
• Perform continuous monitoring to maintain cybersecurity posture and authorization.
• Operate and maintain ACAS, Nessus, and Tenable.sc; manage scans, policies, and credentials.
• Configure and run authenticated/unauthenticated vulnerability scans across Windows, Linux, and network devices.
• Analyze ACAS results to identify vulnerabilities and remediation requirements.
• Collaborate with admins and engineers to track remediation activities.
• Review findings and assist with determining operational and mission risk.
• Track remediation and validate actions through rescans and evidence.
• Support STIG/SRG compliance and vulnerability management activities.
• Respond to cybersecurity directives and compliance requirements.
• Prepare documentation and evidence for security control assessments and audits.
• Coordinate with ISSM, SCAs, system owners, engineers, and government personnel.
• Maintain accurate cybersecurity records and provide status reporting.

Skills

RMF Experience

ACAS/Tenable

Vulnerability Management

NIST 800-53

Documentation

Communication

Windows/Linux

STIGs/SCAP

Education

Bachelor's degree

Tools

ACAS

Nessus

Tenable.sc

Job description

IPSecure is seeking an experienced Information Assurance/RMF Analyst to support DoD and USAF cyber operations. You will execute RMF across the A&A lifecycle, manage ACAS/Tenable scanners, and prepare SSPs, SARs, and POA&Ms.

Collaboration with system owners and engineers is essential to maintain authorization and compliance. The role requires hands-on RMF experience, proficiency with ACAS/Tenable, STIG/SRG familiarity, and strong communication skills.