Information System Security Specialist III
Norfolk, VA
Full Time
Experienced
Location: Norfolk, VA
Clearance: Secret
Position Type: Full-Time
AERMOR is seeking an Information System Security Specialist III to provide advanced cybersecurity and information assurance support to ensure the protection, compliance, and accreditation of information systems. This role requires hands-on expertise with Risk Management Framework (RMF), information assurance tools, and security evaluation processes to support Authority to Operate (ATO) requirements. The Specialist will oversee and maintain security postures, evaluate security solutions, and ensure compliance with applicable federal and DoD cybersecurity policies and standards.
Responsibilities:
Required Experience:
Clearance: Secret
Position Type: Full-Time
AERMOR is seeking an Information System Security Specialist III to provide advanced cybersecurity and information assurance support to ensure the protection, compliance, and accreditation of information systems. This role requires hands-on expertise with Risk Management Framework (RMF), information assurance tools, and security evaluation processes to support Authority to Operate (ATO) requirements. The Specialist will oversee and maintain security postures, evaluate security solutions, and ensure compliance with applicable federal and DoD cybersecurity policies and standards.
Responsibilities:
- Apply cybersecurity, engineering, and Test & Evaluation (T&E) knowledge to support security planning and execution.
- Demonstrate working knowledge of the Risk Management Framework (RMF) process; experience with DIACAP is also applicable.
- Utilize Information Assurance tools such as: DISA Enterprise Mission Assurance Support Service (eMASS) and Assured Compliance Assessment Solution (ACAS).
- Assist with the preparation and maintenance of process artifacts, traceability documents, and compliance evidence to support ATO requirements.
- Evaluate security solutions to verify compliance with security requirements for processing up to classified information.
- Supervise and/or maintain the operational security posture of assigned information systems and programs.
- Develop or assist in developing system security policies.
- Ensure compliance with change management and configuration control processes.
- May be required to hold Interim Security Control Assessor qualification.
Required Experience:
- Bachelor’s degree with 5 years of practical experience, OR High School/GED with 7 years of practical experience.
- Demonstrated competency in Cybersecurity, Engineering, Test & Evaluation (T&E), or Assessment & Authorization (A&A)/ Certification & Accreditation (C&A).
- Familiarity with security policies, standards, and guidance documents.
- Strong background in RMF, DIACAP, and related security compliance processes.
- Experience with eMASS, ACAS, and other security assessment tools.
- Must hold Information Assurance Technical (IAT) III certification.
Apply for this position
Required*