IA Security Specialist

Job Description

We are seeking a skilled IA/Security Specialist - Level II to join our team in the DC, VA, MD area. This role involves performing cyber assessments, analyzing system security practices, supporting Certification and Accreditation (C&A) processes, and ensuring compliance with NIST and/or RMF standards. The ideal candidate will have experience in administering MAC3 and MAC2 environments, conducting security reviews, managing security documentation, investigating security incidents, and supporting two-factor identification protocols.

 

*This role is 100% onsite

Responsibilities:

• Perform Basic Cyber Assessments using the NIST SP 800-171 DoD Assessment Scoring Template.
• Enter assessment results electronically in the Supplier Performance Risk System (SPRS) for relevant systems.
• Analyze and improve system security practices to ensure robust protection of information systems.
• Assist system owners and ISSOs in designing, developing, and writing C&A documentation packages.
• Support Authorization to Operate (ATO) processes.
• Maintain Plans of Action and Milestones (POA&M) and other related artifacts.
• Follow National Institute of Standards and Technology (NIST) and/or Risk Management Framework (RMF) standards in job performance.
• Administer Government Mission Assurance Category (MAC) Three (MAC3) and MAC Two (MAC2) environments.
• Manage access control, malicious code protection, vulnerability and patch management, audit logs, records management, and attack sensing and warning for network, computing, and information components.
• Support IA security compliance reviews through ad-hoc, annual, and quarterly scans.
• Respond to security information requests and support C&A activities.
• Administer security reviews for all new or modified systems, devices, and configurations to maintain consistent security postures.
• Manage security-related documentation and databases, including System Security Authorization Agreements (SSAA), mitigation strategies, waivers, approvals, ports and protocol registrations, and user rights tracking.
• Assist in detailed investigations and documentation of security incidents as required.
• Maintain and sustain all aspects of Common Access Card (CAC) login and Public Key Infrastructure (PKI) technology or other Government authorized two-factor identification protocols.
• Manage application approval databases and user rights forms.
• Provide expertise in Government scanning tools like Retina, AppDetective, and ACAS.
• Support forensic analysis and Intrusion Prevention Systems (IPS).

Qualifications

Required

• Bachelor’s degree and/or equivalency.
• One or more of the following (IAT III)
  • CASP+ CE
  • CCNP Security
  • CISA
  • CISSP (or Associate)
  • GCED
  • GCIH
  • CCSP
• One or more of the following (IAM III)
  • CISM
  • CISSP (or Associate)
  • GSLC
  • CCISO
• Four (4) years of progressive experience demonstrating the required proficiency.
• Secret Clearance.

Preferred

• Federal Consulting Industry Experience Preferred

 

#LI-Onsite

About Us

Perks of working at NetImpact Strategies 

• Your health comes first – we offer comprehensive medical, dental, & vision insurance that starts the first of the month after you join the team 

• Invest in your future – 401(k) Plan – Immediately vested employer contributions; no matching required 

• Work hard, play hard – we offer a generous Paid Time Off (PTO) policy, one (1) additional day of paid wellness leave per calendar year, and observe ten (10) federal holidays 

• Pawsitively pawesome – Pet Insurance (because our little critters are part of our families, too!) 

• Invest in your education – Tuition reimbursement, internal training programs, & company-sponsored industry certifications! 

• Be part of a dynamic and collaborative work environment recently ranked by The Washington Post as a Top Work Place in 2019, 2021,2022, 2023, & 2024! 

• Have fun and celebrate and give back – Team building activities, community volunteering, quarterly HQ days, wellness events, happy hours, family fun events, and more!  

ABOUT US 

NetImpact Strategies Inc. (NetImpact) has been a Trusted Advisor driving impact through digital transformation for the Federal Government for over a decade. We solve complex problems with innovation and agility to create meaningful, transformative, and enduring change. As Trusted Advisors, NetImpact professiona