Specialist, Information System Security II

Leads the development, update, and submission of the RMF packages inside government repositories (e.g., eMASS).

Conducts security control assessments, draft Plans of Action and Milestones (POA&Ms), and maintains system continuous monitoring strategies.

Performs automated and manual vulnerability assessments using tools like ACAS (Nessus) and SCAP.

Translates findings into action by applying Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and resolving compliance gaps.

Serves as the primary bridge between the software development/systems engineering team and the Information System Security Manager (ISSM).

Participates in engineering change boards to ensure modifications do not compromise system posture.

Assists in analyzing security logs, detecting anomalies, and providing system-level technical support during incident response or forensic investigations.

Applies system security engineering principles to implement secure designs, secure configurations, and boundary defenses (firewalls, IDS/IPS, access controls).

• Minimum of 5 to 9 years of direct experience in cybersecurity engineering, systems engineering, or network administration
• Bachelor’s degree in computer science, Information Assurance, System Engineering, or a related technical discipline. Direct experience may substitute for the degree requirements on a case-by-case basis
• Must meet the IASAE Level II baseline qualification requirements
• Security+
• Security Clearance: Secret