Cybersecurity / Information Assurance Specialist
Ato
Cybersecurity Operations
Cybersecurity Tools
Data Security
Dod Rmf
Emass
Facilities Management
Identity and Access Management
Information Security
Information Technology (IT)
InfoSec
Management
Project Management
Risk Governance
Risk Management
Rmf
Security
Security Assessment And Authorization
Security Automation
Security Clearance
Security Compliance
Security Operations
Security Standards
Security Testing
Job Description
CSA Global LLC supports the Department of the Navy Common Access Card Program Management Office (CAC-PMO) by helping teams strengthen authorization-ready security across Navy information systems and network environments. In this onsite Pensacola, FL role, you will help deliver RMF and system authorization support, drive cybersecurity control assessment and remediation activities, and maintain continuing compliance through established Navy processes.
Responsibilities
- Provide RMF and Certification & Accreditation / Assessment & Authorization support in accordance with Department of the Navy cybersecurity requirements.
- Evaluate system information assurance and cybersecurity controls for compliance, identifying vulnerabilities, risks, and required remediation actions.
- Develop, collect, assemble, analyze, and maintain RMF documentation and other cybersecurity artifacts supporting system authorization activities.
- Enter and maintain authorization documentation and supporting evidence in eMASS.
- Coordinate with system owners, validators, certification authorities, approving authorities, and other stakeholders to obtain and maintain system ATOs.
- Apply and validate DISA STIGs and Group Policy Objects (GPOs) to help secure operating systems and applications.
- Perform vulnerability assessments and develop security assessment reports using ACAS.
- Configure and maintain ACAS capabilities, including required upgrades and patches supporting vulnerability-scanning activities.
- Maintain cybersecurity and RMF documentation supporting Navy systems and applications, including DEERS/RAPIDS, PAS, and associated CAC-PMO capabilities.
- Collaborate with Government program personnel, technical teams, system owners, and external stakeholders to support cybersecurity lifecycle management, risk management, system authorization, and continuing compliance activities.
Requirements
- Ability to obtain and maintain an active Secret Clearance.
- IA Contractor Training and Certification and Computing Environment (CE) certification such as Security+.
- Bachelor’s degree in Computer Science or Management Information Systems.
- Information Assurance, Cybersecurity, Electronic Documentation.
- Experience in one or more of the following; DEERS Application/Function, Personnel, Education, and Training system knowledge may be required at the task order level.
- Experience supporting DoD and/or Department of the Navy Risk Management Framework (RMF) activities.
- Experience developing, reviewing, and maintaining RMF packages, security controls, cybersecurity artifacts, and system authorization documentation.
- Working knowledge of the ATO / Assessment & Authorization lifecycle and cybersecurity risk-management processes.
- Experience using eMASS to maintain RMF and system authorization documentation.
- Working knowledge of DISA STIGs and security-hardening requirements for operating systems and applications.
- Experience performing vulnerability assessment and compliance activities using ACAS.
- Ability to analyze cybersecurity vulnerabilities and develop appropriate risk mitigation and remediation strategies.
- Ability to coordinate effectively with system owners, cybersecurity personnel, validators, technical teams, and Government stakeholders.
Technologies
- Risk Management Framework (RMF)
- eMASS
- DISA Security Technical Implementation Guides (STIGs)
- Group Policy Objects (GPOs)
- Assured Compliance Assessment Solution (ACAS)
- DEERS/RAPIDS
- PAS
- Common Access Card Program Management Office (CAC-PMO)
Physical Requirements
- Sit for extended periods of time and work at a computer workstation
- Use hands and fingers to operate keyboards, mice, and other input devices
- Communicate effectively, both verbally and in writing
- Specific vision abilities required may include close vision, distance vision, depth perception, and the ability to adjust
- Stand, walk, bend, or reach; Access equipment located in data centers, offices, or under desks
- Lift and/or move equipment weighing up to 25 pounds
- Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions, in accordance with the Americans with Disabilities Act (ADA)