IA Engineer - Intermediate

Overview

DecisionPoint seeks an
Intermediate Information Assurance Engineer
to support cybersecurity, compliance, and risk management activities for Global Information Technology Support Services supporting the Military Surface Deployment and Distribution Command (SDDC) Deputy Chief of Staff for Information Management (G6). This position supports the protection, monitoring, assessment, and compliance of SDDC information systems and enterprise IT environments.

The Intermediate Information Assurance Engineer will support Risk Management Framework activities, vulnerability management, STIG compliance, POA&M tracking, incident reporting, cybersecurity documentation, and compliance monitoring across SDDC systems. The role requires experience supporting secure DoD environments and working with cybersecurity tools and processes such aseMASS, ACAS, Nessus, SCAP, STIGs, RMF artifacts, Cyber Tasking Orders, and vulnerability reporting.

This position islocatedat HQ SDDC, Scott Air Force Base, Illinois.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

The
Intermediate Information Assurance Engineer
will:

• Support cybersecurity and information assurance activities for SDDC information systems, networks, and business systems.

• Assist with RMF documentation, package development, assessment support, and authorization activities for SDDC systems.

• Update andmaintaincybersecurity documentation ineMASSto support current system authorization status, control implementation, and compliance tracking.

• Support development and maintenance of RMF artifacts, including security plans, POA&M, security design documentation, assessment materials, and supporting technical documentation.

• Assist with vulnerability management activities, including review of ACAS, Nessus, SCAP, and other security scan results.

• Analyze vulnerability findings and support coordination with system administrators, technical teams, ISSOs, ISSMs, and Government stakeholders toidentifyremediation actions.

• Support preparation of vulnerability reports, compliance reports, and POA&M updates for open vulnerabilities and IAVM-related findings.

• Monitor STIG compliance for assigned systems andassistwith review, validation, documentation, and tracking of STIG findings.

• Ingest or associate STIG findings with applicable RMF controls andassistwithmaintainingaudit-ready compliance documentation.

• Support Cyber Tasking Order tracking, compliance discovery, reporting, and coordination with designated points of contact.

• Assistwithfirewall, whitelist, PPSM, and other cybersecurity compliance reviews, as required.

• Support incident response and reporting byassistingin the review of anomalous or suspicious activity, researching potential incidents, and coordinating response actions with the ISSO or ISSM.

• Assist with response, containment, eradication, and recovery activities for confirmed security incident sin accordance withSDDC, USTRANSCOM, NETCOM, and DoD procedures.

• Support administration, configuration, reporting, and maintenance of cybersecurity tools such as ACAS, HBSS, Nessus/Security Center, Solar Winds SEM, Log Rhythm, McAfee Network Security Manager, IDS sensors, or comparable tools.

• Maintainaccuraterecords, reports, trackers, and technical documentation to support audits, inspections, assessments, and Government reporting requirements.

• Ensure assigned cybersecurity activities comply with applicable DoD, Army, USTRANSCOM, SDDC, RMF, STIG, and information assurance requirements.

Clearance Requirement:

• Must hold an active
  Secret clearance.

• Must be eligible to obtain andmaintainrequired Common Access Card (CAC), facility access, system access, and Government network access.

Education:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, orrelatedtechnical discipline.

Experience:

• Minimum 5 years of experience supporting cybersecurity, information assurance, RMF, vulnerability management, or compliance activities within DoD or federal environments.

• Experience supporting RMF authorization activities, cybersecurity…