Information Assurance Analyst II / Cybersecurity Engineer

Position Summary

We are seeking a skilled Information Assurance (IA) professional to support cybersecurity and compliance activities across classified defense programs. The successful candidate will be responsible for implementing and maintaining cybersecurity controls, supporting RMF accreditation efforts, conducting security assessments, and ensuring compliance with DoD cybersecurity requirements.

This position works closely with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), System Administrators, Software Engineers, and Program Management teams to protect mission-critical systems supporting national defense objectives.

Key Responsibilities

Information Assurance & Cybersecurity

• Implement and maintain security controls in accordance with NIST SP 800-53 requirements.
• Support cybersecurity operations for classified information systems.
• Conduct security reviews of hardware, software, and network architectures.
• Monitor system security posture and identify areas for remediation.
• Assist with continuous monitoring activities and recurring compliance reviews.

RMF Support

• Support all phases of the Risk Management Framework (RMF) lifecycle.
• Prepare and maintain RMF documentation packages.
• Assist with Security Plans (SSP), Security Assessment Reports (SAR), and POA&M development.
• Coordinate vulnerability remediation and ensure timely closure of compliance findings.
• Support cybersecurity inspections and security control assessments.

Vulnerability Management

• Analyze ACAS, SCAP, and vulnerability assessment results.
• Support remediation of vulnerabilities identified through scanning activities.
• Track security findings and corrective actions to closure.
• Validate implementation of STIG requirements.

Compliance & Auditing

• Conduct periodic security audits and compliance assessments.
• Support internal and external cybersecurity assessments.
• Maintain cybersecurity documentation and records.
• Assist government customers during accreditation and inspection activities.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline.
• 6-10+ years of cybersecurity, IA, or information security experience.
• Active Secret clearance.
• Experience supporting classified DoD information systems.

Technical Skills

• RMF implementation
• NIST 800-53 controls
• DISA STIGs
• ACAS vulnerability management
• SCAP compliance scanning
• Windows and Linux security administration
• Security auditing and compliance reporting
• Security documentation development

Security Knowledge

• Security control implementation
• Vulnerability management
• Incident reporting procedures
• Continuous monitoring programs
• System hardening practices
• Access control and authentication technologies

Preferred Qualifications

• Experience supporting embedded systems or defense weapon systems.
• eMASS experience.
• HBSS or Endpoint Security Solutions experience.
• Knowledge of secure software development lifecycle concepts.
• Familiarity with classified laboratory or test environments.

Certifications

One or more of the following:

• Security+
• CySA+
• CAP
• CASP+
• CISSP (preferred)
• GIAC certifications