Information Assurance Specialist II

This position requires onsite work at Kirtland Airforce Base in NM and an active Top Secret/SCI Security Clearance. Candidates who do not hold this clearance are not eligible for hire.

We are seeking a highly skilled and detail-oriented Information Systems Assurance Specialist to join our team in support of mission‑critical defense programs. You will play a key role in performing a wide range of functions to ensure the protection of government‑sensitive and classified information systems supporting the identification of cyber risks, understanding applicable policies, and developing mitigation plans.

• Partner daily with stakeholders to identify, assess, and prioritize cyber risks across information systems, helping translate complex threat data into practical, mission‑aligned mitigation strategies.
• Analyze applicable cybersecurity policies and controls, then develop and maintain actionable security plans that address confidentiality, integrity, and availability requirements.
• Collaborate closely with the Information System Security Manager (ISSM) to continuously monitor system security posture, track changes to the system environment, and ensure risks are documented and managed.
• Develop, update, and maintain system authorization artifacts (e.g., SSPs, POA&Ms, risk assessments), ensuring accuracy and readiness throughout the system lifecycle.
• Implement and oversee configuration management activities across authorization boundaries, validating that system changes align with approved security controls and risk tolerance.
• Conduct and support formal risk assessments, evaluating technical, operational, and procedural controls and recommending mitigation actions based on impact and likelihood.
• Participate in and support incident response activities by helping analyze security events, coordinating response actions, and briefing key stakeholders on findings and recommended next steps.
• Serve as a trusted cybersecurity advisor to clients, clearly communicating risks, compliance gaps, and progress in a way that supports informed decision‑making and mission success.

• 2+ years of experience implementing risk management methodologies contained in best practice documentation such as NIST SP 800‑30, SP 800‑53, SP 800‑128, SP 800‑160, SP 800‑171, or CIS benchmarks, in support of system security configurations, practices, and oversight.
• Experience as a System Administrator, Network Administrator, or ISSO.
• Experience with control implementations associated with RMF, FedRAMP, ICD 503, and DoD information levels, including applying them to the design and implementation of IT solutions to achieve system authorizations.
• Experience developing and reviewing ATO authorization packages in Xacta or eMASS.
• Experience analyzing compliance and vulnerability scan results, and implementing appropriate mitigations.
• Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tools.
• Experience performing audit log reviews to detect anomalous behavior in information systems and networks, and overseeing continuous monitoring activities.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• Bachelor’s degree in a Cybersecurity field and 2+ years of experience providing cybersecurity leadership in an ISSO capacity and interfacing with internal and external SMEs such as PMs, Cyber Assessors, and AOs, or 5+ years of experience providing cybersecurity leadership in an ISSO capacity and interfacing with internal and external SMEs such as PMs, Cyber Assessors, and AOs, in lieu of a degree.
• DoD Directive 8140 Qual Matrix for Information Assurance Technician Level II or Information Assurance Manager II Certification.

• Ability to work through challenging security requirements to maintain compliance.
• Possession of excellent written, presentation, and verbal communication skills.
• Possession of excellent organizational skills.
• CGRC, CCNA‑Security, CASP+, CISSP, or Security+ Certification.
• AWS Solutions Architect or Certified Security ­ Specialty Certification.
• Active TS/SCI clearance…