Information Assurance Analyst, Journeyman

Overview of position:

We are looking for an Information Assurance Analyst, Journeyman, provides cybersecurity compliance, vulnerability assessment, and Risk Management Framework (RMF) support for the DFAS Common Computing Environment (CCE). This position assists with security assessments, vulnerability scanning, eMASS documentation, Authority to Operate (ATO) tracking, and Plan of Action and Milestones (POA&M) management. The role also supports FISCAM audit preparation and collaborates with senior Information Assurance analysts to ensure compliance with DoD cybersecurity requirements.

A United States Citizenship and an active Secret DoD Security Clearance is required to be considered for this position.

Responsibilities

• Provide vulnerability assessment support for DFAS CCE classified enclaves
• Assist with security assessments IAW DoD RMF Process
• Support documentation in eMASS records for CCE
• Assist with ATO Status process calendar maintenance
• Support compliance date tracking and Government POC notification
• Assist with RMF artifact creation and maintenance
• Support FISCAM audit preparation and documentation
• Conduct vulnerability scanning and assessment activities
• Document and track POA&M items
• Support senior IA analysts with assessment and documentation tasks

Experience/Skills:

• 5+ years Information Assurance/vulnerability assessment experience
• DoD 8140 Work Role 541 Vulnerability Assessment Analyst Intermediate qualification
• Knowledge of DoD Risk Management Framework (RMF)
• Experience with vulnerability scanning tools (ACAS, Nessus)
• Familiarity with eMASS documentation
• Understanding of FISMA and FISCAM requirements
• Experience with security documentation
• Knowledge of POA&M management
• Experience with classified system assessments

Preferred Qualifications:

• CISSP or CAP certification (upgrade path)
• Experience with DFAS IA programs
• Prior DoD vulnerability assessment experience
• ACAS Experience
• Experience with JWICS authorization
• Knowledge of STIG compliance verification
• Scripting skills for vulnerability automation

Education:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

• CompTIA CySA+
• CompTIA Cloud+
• CompTIA Security+
• CompTIA PenTest+
• GIAC GCIH
• GIAC GSEC
• GIAC GCED
• GIAC GICSP
• or higher-level equivalent certification

Clearance:

• Active Secret Clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).