IA Security Specialist - Level II

Pivot Path Solutions - Washington, DC

Full-time - Mid Level

Washington, DC

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

The IA Security Specialist - Level II position at Pivot Path Solutions involves performing cyber assessments, analyzing system security practices, and ensuring compliance with NIST and RMF standards. The role is critical in supporting Certification and Accreditation processes and maintaining the security of information systems within government environments.

Responsibilities

• Perform Basic Cyber Assessments using the NIST SP 800-171 DoD Assessment Scoring Template.
• Enter assessment results electronically in the Supplier Performance Risk System (SPRS) for relevant systems.
• Analyze and improve system security practices to ensure robust protection of information systems.
• Assist system owners and ISSOs in designing, developing, and writing C&A documentation packages.
• Support Authorization to Operate (ATO) processes.
• Maintain Plans of Action and Milestones (POA&M) and other related artifacts.
• Follow National Institute of Standards and Technology (NIST) and/or Risk Management Framework (RMF) standards in job performance.
• Administer Government Mission Assurance Category (MAC) Three (MAC3) and MAC Two (MAC2) environments.
• Manage access control, malicious code protection, vulnerability and patch management, audit logs, records management, and attack sensing and warning for network, computing, and information components.
• Support DoD, MHS, and DHA IA security compliance reviews through ad-hoc, annual, and quarterly scans.
• Respond to security information requests and support C&A activities.
• Administer security reviews for all new or modified systems, devices, and configurations to maintain consistent security postures.
• Manage security-related documentation and databases, including System Security Authorization Agreements (SSAA), mitigation strategies, waivers, approvals, ports and protocol registrations, and user rights tracking.
• Assist in detailed investigations and documentation of security incidents as required.
• Maintain and sustain all aspects of Common Access Card (CAC) login and Public Key Infrastructure (PKI) technology or other Government authorized two-factor identification protocols.
• Manage application approval databases and user rights forms.
• Provide expertise in Government scanning tools like Retina, AppDetective, and ACAS.
• Support forensic analysis and Intrusion Prevention Systems (IPS).

Requirements

• Bachelor's degree and/or equivalency.
• Four (4) years of progressive experience that demonstrate the required proficiency.
• Certification: IAT III and IAM III: Department of Defense Commercial Certificates for DoD 8570.01-M requirement and CE: Professional level certification for supported technology, such as: CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH, CISM, CSLC, CCISO.
• Clearance: Public Trust, Secret Clearance preferred.

Benefits

• Comprehensive benefits package, including health, dental, and vision insurance.
• Generous Contribution on Dental and Vision Insurances.
• 100% Employer Paid Group Life Insurance, Short Term and Long-Term Disability.
• Safe Harbor 401(K) Plan.
• Health Saving Account (HSA).
• Healthcare Flexible Saving Account (FSA) and Dependent Care FSA.
• Education Reimbursement.
• Employee Referral Program.