IA Engineer - Senior

IA Engineer
- Senior

DecisionPoint seeks a Information Assurance Engineer
- Senior to provide cybersecurity, compliance, and risk management support for Global Information Technology Support Services supporting the Military Surface Deployment and Distribution Command (SDDC) Deputy Chief of Staff for Information Management (G6). This position supports the security, assessment, authorization, monitoring, and compliance of SDDC information systems across classified and unclassified enterprise environments.

The Senior Information Assurance Engineer will provide experienced support for Risk Management Framework activities, eMASS documentation, vulnerability management, STIG compliance, POA&M tracking, cyber compliance reporting, and incident response. The role requires strong experience supporting secure DoD environments and coordinating cybersecurity activities across technical teams, Government stakeholders, ISSOs, ISSMs, system administrators, and program personnel.

This position is located at HQ SDDC, Scott Air Force Base, Illinois.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

The Senior Information Assurance Engineer will:

• Provide senior-level cybersecurity and information assurance support for SDDC systems, networks, and cloud-hosted business systems.
• Support RMF activities for the HQ SDDC Installation Campus Network and assigned business systems throughout the authorization lifecycle.
• Develop, review, update, and maintain RMF documentation, security artifacts, control implementation details, authorization packages, and supporting technical documentation.
• Maintain cybersecurity records in eMASS, including authorization status, control posture, assessment results, POA&Ms, system changes, and related artifacts.
• Support continuous monitoring through control assessments, change documentation, risk assessments, impact analysis, and security/privacy posture reporting.
• Lead or support vulnerability management, including analysis of ACAS, Nessus, SCAP, Fortify, STIG, IAVM, and other security findings.
• Develop, maintain, and track POA&Ms for vulnerabilities, RMF findings, STIG findings, IAVMs, and other compliance items.
• Support vulnerability reporting and remediation coordination, including weekly Vulnerability Index reporting and tracking of open Nessus or IAVM findings.
• Monitor STIG compliance, review manual and automated results, validate findings, and map STIG findings to applicable RMF controls.
• Support Cyber Tasking Order compliance, cyber scorecard reporting, audit support, compliance tracking, and cybersecurity posture reporting.
• Review firewall, whitelist, PPSM, and related cybersecurity compliance requests and provide recommendations to Government cybersecurity leadership.
• Support incident response by reviewing suspicious activity, researching potential incidents, and assisting with response, containment, eradication, and recovery.
• Administer, configure, maintain, and report on cybersecurity tools such as HBSS, ACAS, Nessus/Security Center, Solar Winds SEM, McAfee NSM, IDS sensors, Splunk, Log Rhythm, or comparable tools.
• Coordinate cybersecurity activities with ISSOs, ISSMs, system administrators, network engineers, program offices, functional managers, and Government stakeholders.
• Maintain accurate compliance records, trackers, reports, technical documentation, and audit artifacts for inspections, assessments, authorizations, and Government reporting.
• Ensure cybersecurity activities comply with applicable DoD, Army, USTRANSCOM, SDDC, RMF, STIG, information assurance, and incident handling requirements.

Clearance Requirement: Must hold an active Secret clearance.

Clearance Eligibility: Must be eligible to obtain and maintain required Common Access Card (CAC), facility access, system access, and Government network access.

Education:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical discipline.

Experience:

• Minimum 8 years of experience supporting cybersecurity, information assurance, RMF,…