IA Security Specialist

We are seeking a skilled IA/Security Specialist - Level II to join our team in the DC, VA, MD area. This role involves performing cyber assessments, analyzing system security practices, supporting Certification and Accreditation (C&A) processes, and ensuring compliance with NIST and/or RMF standards. The ideal candidate will have experience in administering MAC3 and MAC2 environments, conducting security reviews, managing security documentation, investigating security incidents, and supporting two-factor identification protocols.

Responsibilities:

Perform Basic Cyber Assessments using the NIST SP 800-171 DoD Assessment Scoring Template.
• Enter assessment results electronically in the Supplier Performance Risk System (SPRS) for relevant systems.
• Analyze and improve system security practices to ensure robust protection of information systems.
• Assist system owners and ISSOs in designing, developing, and writing C&A documentation packages.
• Support Authorization to Operate (ATO) processes.
• Maintain Plans of Action and Milestones (POA&M) and other related artifacts.
• Follow National Institute of Standards and Technology (NIST) and/or Risk Management Framework (RMF) standards in job performance.
• Administer Government Mission Assurance Category (MAC) Three (MAC3) and MAC Two (MAC2) environments.
• Manage access control, malicious code protection, vulnerability and patch management, audit logs, records management, and attack sensing and warning for network, computing, and information components.
• Support IA security compliance reviews through ad-hoc, annual, and quarterly scans.
• Respond to security information requests and support C&A activities.
• Administer security reviews for all new or modified systems, devices, and configurations to maintain consistent security postures.
• Manage security-related documentation and databases, including System Security Authorization Agreements (SSAA), mitigation strategies, waivers, approvals, ports and protocol registrations, and user rights tracking.
• Assist in detailed investigations and documentation of security incidents as required.
• Maintain and sustain all aspects of Common Access Card (CAC) login and Public Key Infrastructure (PKI) technology or other Government authorized two-factor identification protocols.
• Manage application approval databases and user rights forms.
• Provide expertise in Government scanning tools like Retina, AppDetective, and ACAS.
• Support forensic analysis and Intrusion Prevention Systems (IPS).

Required

• Bachelor's degree and/or equivalency.
• One or more of the following (IAT III)
  • CASP+ CE
  • CCNP Security
  • CISA
  • CISSP (or Associate)
  • GCED
  • GCIH
  • CCSP
• One or more of the following (IAM III)
  • CISM
  • CISSP (or Associate)
  • GSLC
  • CCISO
• CE: Associate level (professional preferred) certificate for supported technology.
• Four (4) years of progressive experience demonstrating the required proficiency.
• Secret Clearance.

Preferred

• Federal Consulting Industry Experience Preferred

#LI-Hybrid

Perks of working at NetImpact Strategies

• Your health comes first - we offer comprehensive medical, dental, & vision insurance that starts the first of the month after you join the team
• Invest in your future - 401(k) Plan - Immediately vested employer contributions; no matching required
• Work hard, play hard - we offer a generous Paid Time Off (PTO) policy and observe ALL ten (10) federal holidays
• Pawsitively pawesome - Pet Insurance (because our little critters are part of our families, too!)
• Invest in your education - Tuition reimbursement, internal training programs, & company-sponsored industry certifications
• Be part of a dynamic and collaborative work environment recently ranked by The Washington Post as a Top Work Place in 2019, 2021,2022, & 2023!
• Have fun and celebrate and give back - Team building activities, community volunteering, quarterly HQ days, & an offsite annual awards banquet

ABOUT US

NetImpact Strategies Inc. (NetImpact) has been a Trusted Advisor driving impact through digital transformation for the Federal Government for over a decade. We solve complex problems with innovation and agility to create meaningful, transformative, and enduring change. As Trusted Advisors, NetImpact professionals partner with customer agencies to deliver solutions that empower them to not only meet their missions but also realize their strategic vision through agile, outcome-focused solutions addressing both strategic and tactical requirements. We design and implement comprehensive, tailored solutions that are both mindful of the client's culture and organizational dynamics. NetImpact's core values and commitment to a customer and results-oriented delivery approach has propelled our growth and enabled us to deliver impactful value across Strategic Consulting, Process Automation, Cloud, DevSecOps, Data and Analytics, and Cyber Security for the Federal Government.

ACCESSIBILITY NOTE

NetImpact Strategies is committed to complying with all applicable provisions of the Americans with Disabilities Act, as amended ("ADA"), and applicable state and local laws. It is NetImpact's policy not to discriminate against any qualified person or applicant with regard to any terms or conditions of employment on the basis of such individual's disability. Consistent with this policy of non-discrimination, NetImpact will provide reasonable accommodations to an individual with a disability, as defined in the ADA or applicable law, who has made NetImpact aware of his/her disability, unless doing so would cause undue hardship to NetImpact. If you are an applicant and need reasonable accommodation when applying for job opportunities within NetImpact, or request reasonable accommodation to utilize NetImpact's online employment application, please contact careers@netimpactstrategies.com.

EQUAL OPPORTUNITY EMPLOYER

NetImpact is committed to the development of a creative, diverse, and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at NetImpact will be based on merit, qualifications, and abilities. NetImpact does not discriminate against any person because of race, color, creed, religion, sex (including gender identity, sexual orientation, and pregnancy), marital status, national origin, disability, age, veteran status, genetic information or any other characteristic protected by federal, state, and local laws (referred to as "protected status").