Information Assurance Specialist

INFORMATION ASSURANCE SPECIALIST - (R-CC-25)

INFORMATION ASSURANCE SPECIALIST

Open Position Request Number R-CC-25

CLASSIFICATION: Information Assurance Specialist;
Salary TBD

GRADE: Exempt;
Regular Full-time

ESSENTIAL FUNCTIONS: This position reports to the Cybersecurity Manager, assists in the development of Air Force (AF) RMF Information Technology (IT) Categorization and Selection Checklist, System Security Plans, Critical Security Control Checklists, Software License Management, and Risk Management Framework (RMF) Continuous Monitoring requirements.

GENERAL DUTIES:

• Incumbent will perform the primary responsibilities for assisting the Cybersecurity Manager to obtain and manage the Assessment and Authorization (A&A) requirements of Information Systems (IS) to include networks and standalone IS in classified and unclassified environments.
• Incumbent will assist in the review, application, and maintenance of information assurance policies, procedures and A&A documentation.
• IS security analysis and risk/vulnerability assessments; comprehensive security audits; analysis of network and IS for compliance with DoD security configuration requirements and industry best practices; policies and procedures; system and network diagrams.
• Descriptions of IS; SOP's and previous A&A documents;
  National Institute of Standards and Technology (NIST) Security Controls for specific applicability and compliance;
  Security Test and Evaluation (ST&E) for Assessment and Authorization or re-authorization.
• Analysis of ST&E results and assessments, determinations, and descriptions of risks associated with the results.
• The incumbent will assist ensuring systems are configured and compliant with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs).
• Performing Assured Compliance Assessment Solution (ACAS) and Security Content Automation Protocol (SCAP) scans.
• Utilizing the DoD Risk Management Framework (RMF) process in compiling and generating deliverables such as Concept of Operations (CONOPS), Air Force (AF) RMF Information Technology (IT) Categorization and Selection Checklist; supporting Artifacts, Plan of Action and Milestones (POA&M), Vulnerability reports such as ACAS and SCAP.

OTHER DUTIES: Additional duties may be assigned to support contract/mission support requirements in job-related areas.

EDUCATION/EXPERIENCE REQUIREMENTS: A DoD 8570.1-M IAT Level II and IAM Level I certification (CAP, GSEC, Security+, SCNP or SSCP) or higher DoD 8570.1-M certification is required within 6 months of filling this position. Experience with the installation of ACAS and performing ACAS scans is critical to this position and highly desired. Organizational skills and computer skills (Microsoft Office applications, data entry, report development) are required.

Experience in data collection, entry, tracking and analysis is highly desired. Experience in supporting project planning, coordination and execution is highly desired. Incumbents must be capable of interfacing with a wide range of technical professionals.

OTHER REQUIREMENTS: This position requires a Secret security clearance. Candidates must be eligible to obtain and maintain a Secret security clearance. Supports E-OMS operational objectives. Observes company Quality, Safety, Environmental, Security and Administrative policies; supports Process Improvement.

WORK ENVIRONMENT: Work activities are normally performed in an environmentally controlled area in an office setting on Eglin AFB.

PHYSICAL DEMANDS: This position will be subject to substantial movements (motions) of the wrists, hands, and/or fingers. Must be able to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; viewing a computer terminal; and requires standing, sitting, bending and some lifting or moving of objects. Applicant must be able to sit for long periods of time.

Note: The above statements are intended to describe the general nature and level of work being performed by individuals assigned to this classification. They are not intended to be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of…