Cybersecurity / Information Assurance Specialist

CSA is seeking a Cybersecurity/Information Assurance Specialist to provide cybersecurity, Risk Management Framework (RMF), and system authorization support to the Department of the Navy Common Access Card Program Management Office (CAC-PMO). The position supports the assessment and maintenance of information assurance security controls, identification and remediation of system vulnerabilities, development and maintenance of RMF documentation and artifacts, and coordination of system authorization activities required to achieve and maintain Authorities to Operate (ATOs). The role also supports system hardening, vulnerability scanning, security assessment, and ongoing cybersecurity compliance across Navy information systems and network environments.

For nearly 50 years, CSA has delivered integrated technology and operational support services to meet the defense and federal sector's most complex enterprise needs. Working from operations centers and shipyards to training sites and program offices, CSA deploys experienced teams, innovative tools and proven processes to advance federal missions.  

 How Your Role Will Make an Impact: 

• Provide RMF and Certification & Accreditation / Assessment & Authorization support in accordance with Department of the Navy cybersecurity requirements.
• Evaluate system information assurance and cybersecurity controls for compliance and identify vulnerabilities, risks, and required remediation actions.
• Develop, collect, assemble, analyze, and maintain RMF documentation and cybersecurity artifacts supporting system authorization activities.
• Enter and maintain authorization documentation and supporting evidence in the Enterprise Mission Assurance Support Service (eMASS).
• Coordinate with system owners, validators, certification authorities, approving authorities, and other stakeholders to obtain and maintain system ATOs.
• Apply and validate DISA Security Technical Implementation Guides (STIGs) and Group Policy Objects (GPOs) to secure operating systems and applications.
• Perform vulnerability assessments and develop security assessment reports using Assured Compliance Assessment Solution (ACAS).
• Configure and maintain ACAS capabilities, including required upgrades and patches supporting vulnerability-scanning activities.
• Maintain cybersecurity and RMF documentation supporting Navy systems and applications, including DEERS/RAPIDS, PAS, and associated CAC-PMO capabilities.
• Collaborate with Government program personnel, technical teams, system owners, and external stakeholders to support cybersecurity lifecycle management, risk management, system authorization, and continuing compliance activities.

What You Will Need to Join Our Award-Winning Team:

• Clearance:  Ability to obtain and maintain an active Secret Clearance.
• Certifications: IA Contractor Training and Certification and Computing Environment (CE) certification such as a Security+.
• Education: Bachelor’s degree in Computer Science or Management Information Systems.
• Years of Experience required: 8.
• General Experience required: Information Assurance, Cybersecurity, Electronic Documentation.
• Specific Experience required: Experience in one or more of the following; DEERS Application/Function, Personnel, Education, and Training system knowledge may be required at the task order level.
• Experience supporting DoD and/or Department of the Navy Risk Management Framework (RMF) activities.
• Experience developing, reviewing, and maintaining RMF packages, security controls, cybersecurity artifacts, and system authorization documentation.
• Working knowledge of the ATO / Assessment & Authorization lifecycle and cybersecurity risk-management processes.
• Experience using eMASS to maintain RMF and system authorization documentation.
• Working knowledge of DISA STIGs and security-hardening requirements for operating systems and applications.
• Experience performing vulnerability assessment and compliance activities using ACAS.
• Ability to analyze cybersecurity vulnerabilities and develop appropriate risk mitigation and remediation strategies.
• Ability to coordinate effectively with system owners, cybersecurity personnel, validators, technical teams, and Government stakeholders.

Physical Requirements:

While performing the duties of this job, the employee is regularly required to:

• Sit for extended periods of time and work at a computer workstation
• Use hands and fingers to operate keyboards, mice, and other input devices
• Communicate effectively, both verbally and in writing
• Specific vision abilities required may include close vision, distance vision, depth perception, and the ability to adjust
• Stand, walk, bend, or reach; Access equipment located in data centers, offices, or under desks
• Lift and/or move equipment weighing up to 25 pounds

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions, in accordance with the Americans with Disabilities Act (ADA).

‍This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.

‍

Applicants may need to meet eligibility requirements for access to classified information; an active United States Department of Defense security clearance or the ability to obtain one may be required for this role.‍

‍

As a federal contractor, CSA will abide by the client’s infectious disease protocols.

‍

WE BELIEVE great companies know who they are and what they stand for. CSA’s common purpose and core values were purposefully developed to create a culture focused on unlocking the full potential of our people—so they are inspired to solve our clients’ toughest challenges. It’s no secret, we owe the past 18 years of our success to our outstanding and ambitious team members. To support our hard working team, we offer an environment focused on learning and growth, an awesome benefits package, and opportunities to build a long and successful career.

‍

We are constantly on the hunt for talented, forward-thinking problem solvers with an energetic attitude and a strong work ethic to join our elite team of CSAers.  
‍

Be a part of CSA … do  great  things!

‍

CSA is a Federal Contractor and an Equal Opportunity/Affirmative Action Employer.

‍

‍If you are an individual with a disability and would like to request a reasonable workplace accommodation for any part of our employment process, please send an email to  hr@csaassociates.com. Please indicate the specifics of the assistance needed. Assistance is reserved for individuals who are requesting a reasonable workplace accommodation. It is not intended for other purposes or inquiries. We’re an equal opportunity employer that empowers our people no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or veteran status or other protected characteristic.‍

Federal Equal Opportunity is the Law
‍Federal Employee Rights under FMLA
‍Federal Employee Polygraph Protection Act
‍E-Verify Participation Poster (uscis.gov)
‍If you are a California resident applying for a job, you consent to our  California Job Applicant Privacy Notice .‍

‍

Notification for current or previously cleared professionals:

‍

Official U.S. Government information appearing in the public domain shall not automatically be considered UNCLASSIFIED or approved for public release. CSA recognizes that information contained in resumes of current or previously cleared professionals may be sensitive, contain potentially proprietary and/or protected information. Protected Information is considered classified, in the process of a classification determination, or unclassified, but protected by statute. Therefore, all resumes should be approved for public release by a U.S. Government Official with Original Classification Authority, prior to posting the resume to CSA’s applicant tracking system.
By submitting my resume, I understand that I am NOT authorized to upload content with Official U.S. Government information that is considered, sensitive, proprietary, or protected.