Information Assurance Engineer

Responsibilities:

• Perform duties in tasks in support of maintaining System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms).
• Perform regular self-assessments and internal audits to ensure the system maintains its Authorization to Operate (ATO).
• Maintain and update supporting Governance, Risk, and Compliance (GRC) assets in the customer’s GRC tools.
• Coordinate with technical teams to track the remediation of vulnerabilities identified in scans (e.g., Nessus, ACAS).
• Help develop and deliver security awareness materials to staff, ensuring a culture of security throughout the organization.
• Work with various stakeholders to ensure the systems meet their continuous monitoring requirements and metrics.
• Identify "bottlenecks" in our current security workflows and propose automated or streamlined solutions.

• This position requires an active TS/SCI with a Full Scope Polygraph clearance.
• Bachelor’s degree in computer science, engineering, information assurance, or a related discipline and has at least 5 or more years of experience in an information technology role. Additional experience may be substituted for a degree.
• Is currently DOD 8140 certified or possesses certifications to be eligible for DOD 8140 certification.
• Experience with cloud service providers such as AWS, Azure, GCP, etc.
• Experience in information assurance and or governance risk and compliance is required.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong attention to detail and ability to document findings accurately.
• Effective communication and interpersonal skills to collaborate with diverse stakeholders.
• Ability to work independently and as part of a team.
• Ability to demonstrate “self-starter” traits.
• Knowledge of contract management and legal compliance principles is a plus.