Cyber Security Specialist – Associate (Cybersecurity)
Job Description
Agile Defense is seeking an Associate Cyber Security Specialist to support information assurance activities at Fort Huachuca, AZ on a 100% onsite basis. This role supports IA audits, RMF compliance, continuous monitoring, and Certification and Accreditation (C&A) efforts, with work centered on maintaining security controls and producing audit-ready documentation.
The position is based in Fort Huachuca, Arizona and requires a DoD Secret clearance to start. The selected candidate will help evaluate systems, assess risk and vulnerabilities, and coordinate reporting and remediation tracking with technical teams and leadership.
Key Responsibilities
- Manage day-to-day support for routine IA Audits across all Information Systems (IS), ensuring required IA security controls are applied and maintained.
- Evaluate IS compliance against the Risk Management Framework (RMF) 800-53 Controls and applicable Special Directives.
- Assist with continuous monitoring of RMF packages in eMASS, including POA&Ms, test results, and risk assessments.
- Record and/or prepare audit and RMF artifacts to keep a current repository of system RMF documentation.
- Provide C&A support by performing risk and vulnerability assessments used in the development of security and contingency plans.
- Use NIST 800 Series Special Publications as references for C&A, system security plans, risk assessment, and related security requirements.
- Create, edit, and review organization and team documentation for clarity and accuracy; support development of security TTPs, SOPs, processes, plans, or diagrams.
- Use automated security scanning tools such as SCAP, ACAS, and Tychon to identify potential vulnerabilities.
- Analyze and report findings to technical teams and leadership to support tracking and mitigation.
- Research RFIs from technical teams related to DISA STIG checklists and DoD/Army regulations, and explain requirements in detail to systems administrators.
- Review proposed courses of action from technical teams and recommend the most secure option while balancing operational or mission requirements.
- Support identification, tracking, and remediation of security risks found on information systems.
- Prepare written reports and deliver oral presentations to the Security Manager, Information Assurance Manager, and other senior leaders.
- Coordinate with internal and external entities to improve established processes, ensuring efficient execution of analysis, tracking, mitigation, and reporting requirements.
- Coordinate directly with cross-functional teams and management to resolve compliance issues.
- Support and/or lead special projects as required, and complete other duties as assigned by management.
Minimum Requirements
- Active DoD Secret clearance (Secret, must have clearance to start).
- Excellent communication and interpersonal skills.
- Knowledge of network-specific DISA Security Technical Implementation Guides (STIG) and checklists.
- Knowledge of asset scanning.
- Experience performing audits within a DoD organization.
- Experience with RMF and vulnerability management.
- Bachelor degree, and 4-5 years of experience, or equivalent relevant work experience.
- CompTIA Security+ CE.
- Cloud+.
- Global Industrial Cyber Security Professional (GIAC) Security Essentials.
- Systems Security Certified Practitioner.
Technologies
- eMASS (including POA&Ms, test results, risk assessments)
- SCAP, ACAS, Tychon
- NIST 800 Series Special Publications
- DISA STIG
- RMF 800-53 Controls
- Continuous Monitoring and Risk Scoring (CMRS)
- ePolicy Orchestrator (ePO)
- Assured Compliance Assessment Solution (ACAS)
Working Conditions
- 100% onsite work.
- Ability to sit, stand, and walk for extended periods of time.
- Fine motor skills with the ability to operate keyboards, phones, and controls.
Preferred Skills
- Knowledge of Enterprise Mission Assurance Support Service (eMASS).
- Knowledge of Assured Compliance Assessment Solution (ACAS) and Tychon vulnerability scanning and reporting.
- Knowledge of ePolicy Orchestrator (ePO) and Continuous Monitoring and Risk Scoring (CMRS).
Compensation: USD 80,000 - 93,000 per year.
Core Values at Agile Defense: Happy (Be Infectious), Helpful (Be Supportive), Honest (Be Trustworthy), Humble (Be Grounded), Hungry (Be Eager), Hustle (Be Driven).