Information Assurance Specialist I

Responsibilities

An Average Day:

• Audit systems, SOPs, and security checklists.
• Review and analyze audit logs for compliance with STIGs and IAVAs.
• Support Authorization to Operate (ATO) requirements through ongoing compliance monitoring.
• Manage system configuration baselines and documentation.
• Ensure compliance with RMF requirements, including media sanitization, contingency planning, incident response, insider threat policies, and ISAs/SLAs.
• Monitor cloud provider security controls, including FedRAMP-authorized environments.
• Create and modify required artifacts for RMF Steps 1-5.
• Conduct independent reviews, testing, and assessment of all information, artifacts, and other relevant data pertaining to systems progressing through RMF.
• Load artifacts into eMASS.
• Select and tailor controls in eMASS.
• Develop Plan of Actions and Milestones (POA&Ms) / Risk Assessment Reports (RARs), and automated scan reviews.
• Responsible for Certification Test and Evaluation (CT&E) system's compliance with all applicable Information Assurance Controls (IACs) for an assigned system, including developing the appropriate test procedures, executing the test procedures, and accurately documenting the results of security testing.
• Review CT&E test plans and procedures to ensure the test plan addresses level of effort and validates all IA requirements.

Requirements

• Must hold an active DoW Secret Clearance.
• Associate degree or higher in IT, Cybersecurity, Information Assurance, or related field; or 1–2 years of relevant professional experience.
• Department of War (DoW) 8570.01-M, IAM Level II certification required.
• Two (2) or more years of experience in the cybersecurity field.
• Experience with assessment and authorization (A&A).
• Experience with assessing and validating RMF, National Institute of Standards and Technology (NIST), and Committee on National Security Systems Instruction (CNSSI) security controls.
• Hands-on experience with eMASS.
• Visio diagram creation and modification.
• RMF Documentation creation and modification (SSP, CCB, COOP, etc.).
• Familiarity with NIST 800-53 controls.
• Ability to provide security assessment reports that cover risks that the client should be aware of and mitigate risk with residual remaining risks.

Qualifications

• U.S. Citizen in accordance with 8 U.S.C. 1324b(a)(2)(C) .

Pay

The salary range for this position is USD $40.00/Hr. - USD $44/Hr. Actual compensation will be determined based on several factors permitted by law.

Benefits

AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.

EEO Statement

AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $40.00/Hr. - USD $44/Hr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance. EEO Race/Sex/Disability Status/Veteran Status