Information Assurance & Compliance Specialist

Information Assurance & Compliance Specialist

At Agile Defense, we believe action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and courage to build for what comes next.

• Requisition #: 1319
• Job Title:
  
  Information Assurance & Compliance Specialist
• Location:
  
  Quantico, VA
• Required Clearance:
  Active Secret clearance
• Certifications:
  
  DoD 8570 IAT II Level (CCNA-Security, CySA, GICSP, GSEC, Security+CE, SSCP); may start with lower level but must attain IAT II within 180 days.

The successful candidate will provide Information Systems Security support for enterprise network assets. A strong understanding of DoD STIG/IAVA and compliance processes is necessary in order to be successful in this position. Assured Compliance Assessment Solution (ACAS) is the primary tool used to facilitate a compliant and secure network.

• Conduct vulnerability scans on a regularly scheduled basis, and ad hoc, as directed.
• Provide a regularly updated list of systems scanned and individual scan results.
• Coordinate scans with respective system owners.
• Provide scan results to system engineers for mitigation efforts.
• Work directly with system engineers to clearly identify changes.
• Maintain configuration items and execute functions on vulnerability management platforms, including ACAS, Nessus, STIG Validation Scans, and manual checks.
• Create essential documentation (procedures, scanning reports, remediation reports, etc.), provide analysis and metrics on vulnerabilities, and drive remediation across the organization.
• Serve as a subject matter expert for vulnerability scanning and STIG compliance procedures, ACAS 5.4 or higher execution/operation.
• Assist system engineers by validating device configurations and completing STIG checklists quarterly.
• Work closely with the A&A team to assist with the development of Risk Management Framework (RMF) plans.
• Assist with Security Content Automation Protocol (SCAP) scans to validate compliance.
• Assist with DoDI 8500.2 IA Controls and reciprocity.
• Attend meetings and provide recommendations concerning risk management and mitigation efforts for organizational assets.
• Develop and maintain metrics and reports on vulnerability findings and remediation compliance.
• Facilitate proactive remediation of new vulnerabilities by collecting information from threat and vulnerability feeds, analyzing impact/applicability to our environment, and communicating recommended actions to impacted teams.
• Provide technical support to system and technology owners to propose mitigation and remediation solutions.
• Document configuration deviations; validate against tickets and RFMs.
• Assist with eMASS package preparation and review.
• Log into network devices using command line on a daily basis as needed for troubleshooting and device verification.
• Track and maintain newly added or removed devices on the asset list (software versions, model, and serial numbers) and ensure devices are scanned in ACAS. Utilize Microsoft Defender for Endpoint (MDE) to track overall security posture.

• Bachelor’s degree and 4-5 years of experience, or equivalent relevant work experience.
• DoD 8570 IAT II Level Certification (CCNA-Security, CySA, GICSP, GSEC, Security+CE, SSCP); lower level permissible but must reach within 180 days.
• High-level familiarity with vulnerability management tools such as ACAS and SCAP.
• Background as an Information Systems Security Officer or Information Systems Security Engineer (ISSE). Strong systems security mindset and detail oriented.
• Strong written and oral communication skills.
• Good communication and interpersonal skills.
• Ability to follow policies and procedures.
• Clear speaking voice and ability to respond clearly to questions.
• Ability to address negative situations and resolve them positively.
• Team player contributing to policy development and RMF package accreditation requirements.

• Vulnerability Management tools – ACAS, SCAP, Nessus.
• Configuration and audit tools – ACAS, Nessus, STIG Validation, eMASS, Solar Winds, MCD, OPDRS, Red Seal, DISA STIG Viewer, Microsoft Defender for Endpoint (MDE).
• Experience with DoD STIGs, IAVA compliance, ACAS, Solar Winds, ISE, SCAP.
• Broad knowledge of network security and device troubleshooting via CLI.

Agile Defense offers a competitive and comprehensive benefits package. Please visit our website under the Careers section for more details.

Mid‑Senior level

Equal Opportunity Employer/Protected Veterans/Individuals With Disabilities. We may use artificial intelligence (AI) tools to support parts of the hiring process, but final hiring decisions are made by humans. If you would like more information about how your data is processed, please contact us.