IA Engineer - Senior

Overview DecisionPoint seeks a Information Assurance Engineer - Senior  to provide cybersecurity, compliance, and risk management support for Global Information Technology Support Services supporting the Military Surface Deployment and Distribution Command (SDDC) Deputy Chief of Staff for Information Management (G6). This position supports the security, assessment, authorization, monitoring, and compliance of SDDC information systems across classified and unclassified enterprise environments.  The Senior Information Assurance Engineer will provide experienced support for Risk Management Framework activities, eMASS documentation, vulnerability management, STIG compliance, POA&M tracking, cyber compliance reporting, and incident response. The role requires strong experience supporting secure DoD environments and coordinating cybersecurity activities across technical teams, Government stakeholders, ISSOs, ISSMs, system administrators, and program personnel.  This position is located at HQ SDDC, Scott Air Force Base, Illinois.  Note:  By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.   Duties & Responsibilities The Senior Information Assurance Engineer will:  Provide senior-level cybersecurity and information assurance support for SDDC systems, networks, and cloud-hosted business systems.  Support RMF activities for the HQ SDDC Installation Campus Network and assigned business systems throughout the authorization lifecycle.  Develop, review, update, and maintain RMF documentation, security artifacts, control implementation details, authorization packages, and supporting technical documentation.  Maintain cybersecurity records in eMASS, including authorization status, control posture, assessment results, POA&Ms, system changes, and related artifacts.  Support continuous monitoring through control assessments, change documentation, risk assessments, impact analysis, and security/privacy posture reporting.  Lead or support vulnerability management, including analysis of ACAS, Nessus, SCAP, Fortify, STIG, IAVM, and other security findings.  Develop, maintain, and track POA&Ms for vulnerabilities, RMF findings, STIG findings, IAVMs, and other compliance items.  Support vulnerability reporting and remediation coordination, including weekly Vulnerability Index reporting and tracking of open Nessus or IAVM findings.  Monitor STIG compliance, review manual and automated results, validate findings, and map STIG findings to applicable RMF controls.  Support Cyber Tasking Order compliance, cyber scorecard reporting, audit support, compliance tracking, and cybersecurity posture reporting.  Review firewall, whitelist, PPSM, and related cybersecurity compliance requests and provide recommendations to Government cybersecurity leadership.  Support incident response by reviewing suspicious activity, researching potential incidents, and assisting with response, containment, eradication, and recovery.  Administer, configure, maintain, and report on cybersecurity tools such as HBSS, ACAS, Nessus/Security Center, SolarWinds SEM, McAfee NSM, IDS sensors, Splunk, LogRhythm, or comparable tools.  Coordinate cybersecurity activities with ISSOs, ISSMs, system administrators, network engineers, program offices, functional managers, and Government stakeholders.  Maintain accurate compliance records, trackers, reports, technical documentation, and audit artifacts for inspections, assessments, authorizations, and Government reporting.  Ensure cybersecurity activities comply with applicable DoD, Army, USTRANSCOM, SDDC, RMF, STIG, information assurance, and incident handling requirements.  Qualifications Clearance Requirement:    Must hold an active  Secret clearance.   Must be eligible to obtain and maintain required Common Access Card (CAC), facility access, system access, and Government network access.  Education:   Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical discipline. Experience:   Minimum 8 years of experience supporting cybersecurity, information assurance, RMF, vulnerability management, or compliance activities within DoD or federal environments.  Experience supporting RMF authorization activities, system security documentation, control assessment, continuous monitoring, and ATO package development.  Experience using eMASS to maintain RMF packages, document controls, track POA&Ms, update authorization information, and support assessment activities.  Experience reviewing vulnerability scan results and coordinating remediation using tools such as ACAS, Nessus, SCAP, Fortify, or comparable DoD-approved scanning tools.  Experience supporting DISA STIG compliance, including checklist review, finding validation, remediation coordination, and audit documentation.  Experience developing, updating, and tracking POA&Ms for RMF controls, vulnerabilities, IAVMs, cyber findings, and compliance gaps.  Experience supporting incident response, suspicious activity reporting, cyber compliance reporting, cyber scorecards, and coordination with ISSO, ISSM, or cybersecurity leadership.  Experience coordinating cybersecurity activities across technical teams, Government stakeholders, and program personnel in mission-focused environments.  Technical Knowledge:   Knowledge of DoD cybersecurity policies, RMF, eMASS, DISA STIGs, POA&M management, IAVM compliance, continuous monitoring, and vulnerability management processes.  Familiarity with cybersecurity tools such as ACAS, Nessus/Security Center, SCAP, HBSS, McAfee security tools, IDS sensors, Splunk, SolarWinds SEM, LogRhythm, or comparable tools.  Understanding of cyber compliance reporting, Cyber Tasking Orders, cyber scorecards, vulnerability index reporting, audit support, and authorization package maintenance.  Knowledge o