Senior Information Assurance Specialist

ValidaTek, Inc. is an award-winning Small Business that provides high-security mission-critical IT services to the Federal Government. Our commitment to excellence in service delivery has resulted in dramatic growth and an expanding client base that includes several U.S. Federal Departments. The corporate infrastructure is robust and based on industry best practices as evidenced by our DCAA Approved accounting system, ISO 9001:2015, ISO 20000-1:2011, and ISO 27001:2013 certifications, and CMMI Level 5 for Services (CMMI-SVC Level 5) and CMMI Level 5 for Development (CMMI-DEV Level 5) appraisals. We pride ourselves in being the best and only attracting and retaining the best talent to fuel our rapid growth. We promote a strong employee-focused corporate culture that provides a diverse, prosperous and rewarding place to work. We provide our employees with competitive benefits, educational assistance, and career growth opportunities. Every employee is valued for their contributions and we all take pride in helping our customers achieve their goals, which in turn contributes to the overall success of the company.

www.validatek.com

Senior Information Assurance Specialist

*Top Secret Clearance - Required*

Summary:

The Senior Information Assurance Specialist provides advanced cybersecurity, information assurance, and risk management expertise in support of the FEMA Countering Weapons of Mass Destruction (CWMD) mission. This position is responsible for developing, implementing, and evaluating cybersecurity strategies, policies, standards, and technical solutions designed to protect mission-critical systems, networks, applications, and sensitive information.

The specialist evaluates system security architectures, identifies vulnerabilities, assesses cybersecurity risks, and recommends mitigation strategies to maintain compliance with federal security requirements. Responsibilities include supporting the Risk Management Framework (RMF), security assessments, continuous monitoring, vulnerability management, incident response, and the development of security documentation and procedures. The role requires the ability to independently address complex cybersecurity challenges and provide technical guidance to government stakeholders and program leadership.

Responsibilities:

• Develop, implement, and maintain information assurance policies, procedures, technical standards, and security controls in accordance with federal cybersecurity requirements.
• Conduct cybersecurity risk assessments, vulnerability assessments, and security compliance reviews to identify potential threats and recommend appropriate mitigation strategies.
• Support the implementation and maintenance of the Risk Management Framework (RMF), including security categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, review, and maintain Authorization to Operate (ATO) documentation, System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and other required security artifacts.
• Evaluate system architectures, hardware, firmware, software, and applications to identify security weaknesses and ensure compliance with established security requirements.
• Monitor network environments, analyze security logs, and investigate potential cybersecurity incidents, including malware, phishing, intrusion attempts, denial-of-service attacks, and unauthorized access.
• Develop and implement strategies to detect, prevent, and mitigate cybersecurity threats, vulnerabilities, and emerging attack vectors.
• Analyze security data and trends to identify recurring vulnerabilities, emerging threats, and opportunities to strengthen the organization's security posture.
• Support security control assessments, technical testing, vulnerability scanning, and remediation activities to validate the effectiveness of implemented security controls.
• Apply security configuration standards, including Security Technical Implementation Guides (STIGs), to ensure systems are securely configured and maintained.
• Develop and maintain disaster recovery, contingency planning, and incident response procedures to support operational resilience and continuity of mission-critical services.
• Provide technical recommendations regarding cybersecurity technologies, tools, processes, and security architecture improvements.
• Research emerging cybersecurity threats, technologies, and industry best practices to recommend improvements to organizational security capabilities.
• Collaborate with government stakeholders, system administrators, engineers, and other technical personnel to ensure cybersecurity requirements are incorporated throughout the system development and operational lifecycle.
• Provide cybersecurity guidance, communicate risk findings, and brief program leadership on security posture, compliance gaps, and recommended corrective actions.
• Perform additional duties and responsibilities as required to support program objectives.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related discipline.
• Minimum of eight (8) years of relevant experience in information assurance, cybersecurity, information systems security, or a related technical field. Equivalent combinations of education, certifications, and relevant experience may be considered.
• Active Top Secret (TS) security clearance required.
• Demonstrated experience implementing and maintaining federal cybersecurity policies, procedures, and security controls.
• Hands-on experience supporting the Risk Management Framework (RMF) and federal system authorization processes.
• Working knowledge of NIST cybersecurity standards, including NIST SP 800-53, 800-37, 800-30, and applicable 800-series publications.
• Experience developing and maintaining ATO packages, System Security Plans, Security Assessment Reports, POA&Ms, and other security compliance documentation.
• Experience conducting vulnerability assessments, security control assessments, risk analyses, and security compliance reviews.
• Knowledge of federal cybersecurity requirements, including FISMA, FIPS, and applicable DHS security policies and directives.
• Experience with security assessment tools, vulnerability scanning technologies, security monitoring platforms, and configuration compliance tools.
• Strong analytical, problem-solving, technical writing, and communication skills.
• Ability to work independently, manage competing priorities, and communicate complex technical security issues to technical and non-technical stakeholders.

Salary Disclosure:

Actual salary will be based on a variety of factors including but not limited to experience, geographic location, contract affordability, internal equity, education, and certifications. The upper end of the salary range may be reserved for individuals who have demonstrated tenure with the company, seniority, and proven excellent performance. This includes factors such as education, certifications, and extensive/unique experience beyond what is required.

EEO Statement:

ValidaTek is an Equal Opportunity Employer. All qualified applicants will be considered without regard to disability, protected veteran status, or any other status protected by federal, state, or local laws. Applicants who are selected for employment will be required to verify authorization to work in the United States. Offers of employment will be contingent upon passing a post-offer background check.