> Markdown version of [/jobs/ext/4417347-information-assurance-specialist](https://www.wearedevelopers.com/jobs/ext/4417347-information-assurance-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Assurance Specialist - **Company:** Seneca Holdings - **Location:** Mechanicsburg, PA, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Technology, CIS Benchmarks, Vulnerability Analysis - **Published:** October 15, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/88644008/1 ## About the Role * Possess current Secret clearance plus one of the following: * Bachelor's Degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field, plus 3+ years of experience in RMF or system security * Or7+ years of directly relevant security engineering or cyber experience without a degree. Technical Skills & Knowledge * Comprehensive understanding of DoW RMF, NIST 800-37, and security authorization processes. * Demonstrated hands-on experience evaluating security vulnerabilities and compliance on DoW networks. * Proficiency in handling DISA STIGs, vulnerability scanners, POA&Ms, and authorization packages. ## Description * Vulnerability Assessment & Analysis: Conducts vulnerability scans and assessments, analyzes findings, and recommends effective remediation paths forward. * Remediation Management: Tracks remediation status, coordinates vulnerability resolution efforts, and supports compliance reporting. * Framework Compliance: Execute and oversee Information Assurance (IA) and cybersecurity processes directly aligned with DoD/DoW frameworks, DISA STIGs, and applicable policies. * Authorization & Documentation: Manage security documentation, artifacts, and authorization packages (such as ATO packages, POA&Ms, and vulnerability tracking mechanisms). * Technical Advisory: Serve as a technical advisor on security configurations, assisting system administrators and engineers in maintaining optimal security baselines across DoW networks. * Continuous Monitoring: Monitor system logs, security events, and compliance reports to detect anomalies or potential security posture degradations.