Information Assurance Specialist

Abacus Technology Corporation is a Federal government contractor and provider of enterprise information technology (IT) services and solutions.  For 40 years, we’ve developed effective partnerships with government and industry to tackle business challenges and pressures for Federal Defense, Civilian, and Intelligence customers.  Abacus maintains core competencies in: IT Infrastructure Support, Network Operations and Maintenance, Communication Solutions, Systems Engineering and Integration, Cyber Security / Information Assurance, Application Development, Program Management, and Business Transformation.

• Provide cybersecurity services to protect information and information systems from unauthorized access and to protect the data within systems. 
• Validate technical standards and security policy for LAN topologies and components; identify and remediate security vulnerabilities. 
• Administer HBSS. 
• Perform scanning, analysis and remediation with the Enterprise provided tool and provide reports. 
• Provide reports and documentation in support of the submission (and continuous monitoring) for the RMF. 
• Assist with preparation for DISA CCRIs and other DoD or Department of the Army Cybersecurity related inspections/evaluations. 
• Provide support for the DoD PKI service. 
• Request, receive, install, and maintain accountability of system (server) PKI certificates and providing technical support for PKI. 
• Provide DoD PKI services including directory support, certification validation, registration, interface to related Army systems, hosting of PKI-enabled servers, and required key management services, as well as PKI solutions for email, web applications, file transfer, and VPNs. 
• Provide PKI authentication for users’ devices and applications to utilize global information services data and enable CAC Cryptographic Logon (CCL), when applicable, for controlling logical access. 
• Register and install PKI certificates on Army-owned PKI protected devices. 
• Utilize the eMASS to record RMF activities such as all relevant security controls. 
• Perform vulnerability scans weekly.  
• Provide IAVA compliance and compliance monitoring of all network connected assets. 
• Manage the IAVM program for all RNEC-Aberdeen managed devices for installation and customer activities.  
• Provide patches for each authorized PC baseline and server, as required.  
• Manage compliance reporting using ACAS to ensure that IAVM messages are acknowledged, corrective action implemented, extensions requested, compliance verified, and reporting data entered into required database/system.  
• Develop Mitigation Action Plan (MAP) and IAVM POA&Ms.  
• Perform network, workstation, and server scans and compile vulnerability reports to facilitate corrections.  
• Plan, detect, respond, investigate, and report malicious and unauthorized activities.  
• Conduct compliance checks for known or potential Communications Systems and System Support to all computer systems and network assets before the assets can be connected to the network.  
• Manage cybersecurity hardware and software changes for the installation.  
• Provide host-based firewall management for enterprise managed assets and workstations.  
• Determine abnormalities, attacks, damages, and unauthorized modifications in the network via mechanisms such as intrusion detection devices. 

4+ years experience in a cyber security role including at least a year of experience with ACAS, HBSS, and RMF.  Bachelor’s degree in a related field desired.  Must hold at least one of the following certifications in compliance with DoD 8570 requirements for IAM Level II: CAP, CASP+ CE, CISM, or CISSP.  Hands-on experience and training on the verification and enforcement of Security Technical Implementation Guide (STIG) identification and remediation.  Hands-on experience and training on the verification and enforcement of Information Assurance Vulnerability Management (IAVM) identification and remediation.  Experience with reporting, scanning and analysis using ACAS.  Knowledge of Certification & Accreditation (C&A) processes and the RMF.  Experience with Enterprise Mission Assurance Support Service (eMASS).  Knowledge of Public Key Infrastructure (PKI).  Knowledge of Cyber Command Readiness Inspection (CCRI) or similar functions/audits.  Knowledge of Incident Response Plans (IRP) and incident response executions.  Extensive experience in cybersecurity documentation and system authorization artifacts (System Security Plan, lifecycle documentation, continuous monitoring plan Security Assessment Plan, Security Assessment Report, Risk Assessment, etc.).  Possess excellent technical writing, critical thinking/analytical, oral and written communication skills.  Extensive knowledge of RMF to include the RMF Knowledge Service.  Knowledge and experience communicating IA concepts to technical and nontechnical personnel.  Able to develop technical documents and produce system design documentation.  Must have excellent customer service skills; be able project a positive image and professional manner at all times; and be able to work within the confines of a set time schedule.  Must be a US citizen and hold a current Secret clearance.

The projected compensation range for this position is $85,000-$100,000. There are multiple factors that can impact a final salary, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (if remote or different from the stated location for this position), education and certifications as well as Federal Government Contract Labor categories. In addition, Abacus Technology offers a benefits package that includes: Health and Dental Insurance; 401(k) and Matching; Life Insurance; Short- and Long-Term Disability; Paid Time Off; Paid Holidays; and Professional Membership, Technical Training, Certification, and Education Assistance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

All your information will be kept confidential according to EEO guidelines.