Overview
IA Security Specialist Jobs in Falls Church, Virginia, USA at NetImpact Strategies
Title: IA Security Specialist
Company: NetImpact Strategies
Location: Falls Church, Virginia, USA
Type: Full Time
Category: IT/Tech, Security
We are seeking a skilled IA/Security Specialist – Level II tojoin our teamin the DC, VA, MD area. This role involves performing cyber assessments, analyzing system security practices, supporting Certification and Accreditation (C&A) processes, and ensuring compliance with NIST and/or RMF standards. The ideal candidate will have experience in administering MAC3 and MAC2 environments, conducting security reviews, managing security documentation, investigating security incidents, and supporting two-factor identification protocols.
This role is 100% onsite
Responsibilities:
Perform Basic Cyber Assessments using the NIST SP 800-171 DoD Assessment Scoring Template.
Enter assessment results electronically in the Supplier Performance Risk System (SPRS) for relevant systems.
Analyze and improve system security practices to ensure robust protection of information systems.
Assist system owners and ISSOs in designing, developing, and writing C&A documentation packages.
Support Authorization to Operate (ATO) processes.
Maintain Plans of Action and Milestones (POA&M) and other related artifacts.
Follow National Institute of Standards and Technology (NIST) and/or Risk Management Framework (RMF) standards in job performance.
Administer Government Mission Assurance Category (MAC) Three (MAC3) and MAC Two (MAC2) environments.
Manage access control, malicious code protection, vulnerability and patch management, audit logs, records management, and attack sensing and warning for network, computing, and information components.
Support IA security compliance reviews through ad-hoc, annual, and quarterly scans.
Respond to security information requests and support C&A activities.
Administer security reviews for all new or modified systems, devices, and configurations to maintain consistent security postures.
Manage security-related documentation and databases, including System Security Authorization Agreements (SSAA), mitigation strategies, waivers, approvals, ports and protocol registrations, and user rights tracking.
Assist in detailed investigations and documentation of security incidents as required.
Maintain and sustain all aspects of Common Access Card (CAC) login and Public Key Infrastructure (PKI) technology or other Government authorized two-factor identification protocols.
Manage application approval databases and user rights forms.
Provide expertise in Government scanning tools like Retina, App Detective, and ACAS.
Support forensic analysis and IntrusionPreventionSystems (IPS).
Qualifications
Required
Bachelor’s degree and/or equivalency.
One or more of the following (IAT III)
CASP+ CE
CCNP Security
CISA
CISSP (or Associate)
GCED
GCIH
CCSP
One or more of the following (IAM III)
CISM
CISSP (or Associate)
GSLC
CCISO
Four (4) years of progressive experience demonstrating the required proficiency.
Preferred
Federal Consulting Industry Experience Preferred
#J-18808-Ljbffr
