Seneca Technologies is hiring for an
Information Assurance Specialist. The Information Assurance Specialist II provides cybersecurity, risk management, and compliance support within a Department of War (DOW) agency contractor environment. This hands-on role is responsible for driving vulnerability assessment, system security engineering, and ensuring information systems maintain a robust security posture in compliance with federal and defense frameworks, including NIST 800-37 and Risk Management Framework (RMF) guidelines.
Key Responsibilities:- Vulnerability Assessment & Analysis: Conducts vulnerability scans and assessments, analyzes findings, and recommends effective remediation paths forward.
- Remediation Management: Tracks remediation status, coordinates vulnerability resolution efforts, and supports compliance reporting.
- Framework Compliance: Execute and oversee Information Assurance (IA) and cybersecurity processes directly aligned with DoD/DoW frameworks, DISA STIGs, and applicable policies.
- Authorization & Documentation: Manage security documentation, artifacts, and authorization packages (such as ATO packages, POA&Ms, and vulnerability tracking mechanisms).
- Technical Advisory: Serve as a technical advisor on security configurations, assisting system administrators and engineers in maintaining optimal security baselines across DoW networks.
- Continuous Monitoring: Monitor system logs, security events, and compliance reports to detect anomalies or potential security posture degradations.
Qualifications & Requirements:- Possess current Secret clearance plus one of the following:
- Bachelor's Degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field, plus 3+ years of experience in RMF or system security
- Or 7+ years of directly relevant security engineering or cyber experience without a degree.
Technical Skills & Knowledge- Comprehensive understanding of DoW RMF, NIST 800-37, and security authorization processes.
- Demonstrated hands-on experience evaluating security vulnerabilities and compliance on DoW networks.
- Proficiency in handling DISA STIGs, vulnerability scanners, POA&Ms, and authorization packages.
Location: Mechanicsburg, PA Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.
Clearance: Active Secret
