Lead Information Assurance Analyst

The role includes measurable efforts involving automation, cybersecurity posture improvement, scalability of the DoD Network environment, improved performance, reduced network redundancies, and increased efficiency in sustaining the single service provider environment. The selected candidate will conduct or review technical security assessments, identify vulnerabilities and noncompliance with IA requirements, recommend mitigations, support RMF activities, contribute to secure system design, and participate in risk assessment throughout the certification and accreditation process. Program and Project Focus Deliver enhanced network capabilities for the DISA network. Support implementation of Zero Trust policies. Support migration of network services. Support modernization of wireless LAN services. Support implementation of IPv6. Explain the security-policy implications of engineering design decisions. Document security compliance for Authority to Operate submissions. Coordinate information assurance submissions with government ISSM counterparts. Lead cybersecurity submissions for engineering projects as they progress through design, testing, and deployment. Primary Responsibilities Evaluate, develop, and implement information assurance guidelines and procedures as required. Recommend security-solution mitigations and enhancements that support IA guidelines and customer requirements. Perform vulnerability and risk analyses of computer systems and applications throughout all phases of the system development life cycle. Conduct IT security site surveys. Support Authorizing Official actions by developing and delivering accreditation packages with supporting documents and artifacts in accordance with RMF, NIST SP 800-37 Revision 2, and agency-specific RMF requirements. Provide input to an Audit and Accountability Plan containing methods, procedures, and planned reviews for continuing accreditation and authorization against NIST SP 800-53 Audit and Accountability family controls. Provide input to and implement an organizational access-control policy and plan aligned with risk levels defined in NIST SP 800-53 Revision 4, including auditing at least annually. Develop processes and procedures for evaluating and documenting information-system security vulnerabilities in accordance with DoDI 8510.01, Risk Management Framework for DoD IT. Ensure information systems meet or exceed compliance requirements. Identify, report, and resolve security violations. Establish and satisfy information assurance and security requirements based on user, policy, regulatory, and resource demands. Perform multiple types of vulnerability and assessment scans using multiple tools. Use eMASS and/or Xacta to support authorization and compliance activities. Mentor team members. Monitor and review regular updates and upgrades to equipment and procedures to maintain alignment with IA requirements and business needs. Identify security requirements for the proper handling of government data.

Bachelor’s degree and 12+ years of experience. Additional years of directly applicable experience may be accepted in lieu of a degree. Prior relevant experience working with RMF and serving as an ISSO, providing ISSO support, serving as an SCA representative, or performing a similar role. Current DoD 8570 IAT Level II certification, such as Security+. Experience performing multiple types of vulnerability and assessment scans with multiple tools. Experience using eMASS and/or Xacta. Solid understanding of the Risk Management Framework and System Development Life Cycle. Understanding of hardware and software engineering best practices. Demonstrated analytical and problem-solving skills. Ability to meet eligibility requirements for assignment to the specified contract. Ability to meet government security-investigation and eligibility requirements. U.S. citizenship, as required by the government contract. Active Secret security clearance. Desired Qualifications Experience collaborating with diverse stakeholders to drive consensus and forward progress. Ability to identify needed changes to processes and activities and help implement continuous-improvement solutions. Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), and/or Certified Accreditation Professional (CAP). Ability to work successfully as part of a virtual team. Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Salary Range: $110,000-$155,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.) Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs. Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status. Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients’ missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT’s experienced workforce and our commitment to ensuring we meet and exceed our clients’ expectations.