Information Assurance Specialist at TRISTAR INC

Crane, Indiana, United States -

Full Time

Start Date

Immediate

Expiry Date

30 Jul, 26

Salary

0.0

Posted On

01 May, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risk Management Framework, RMF, eMASS, ATO, Cybersecurity Compliance, Vulnerability Management, ACAS, STIGs, SCAP, POA&M, Information Assurance, DoD Policies, System Accreditation, Continuous Monitoring, Security Documentation, Vulnerability Scanning

Industry

Defense & Space

Description

Description We are seeking a highly motivated Cybersecurity / Information Assurance (IA) Specialist to support systems in achieving and maintaining cybersecurity compliance and Authorization to Operate (ATO). The ideal candidate will have experience working within the Risk Management Framework (RMF) and supporting enterprise-level cybersecurity compliance efforts. Key Responsibilities Provide Information Assurance (IA) and cybersecurity support to ensure compliance with DoD cybersecurity policies and standards. Support the development, submission, and maintenance of ATO packages within the Enterprise Mission Assurance Support Service (eMASS). Create, update, and manage IA artifacts required for: Initial system authorization, Continuous monitoring, System reauthorization / re-accreditation. Implement cybersecurity processes aligned with the Risk Management Framework (RMF), including: Security control identification and assessment, Control implementation documentation, Authorization package support. Develop and maintain Plan of Actions and Milestones (POA&M) to track vulnerabilities and mitigation strategies. Coordinate with system stakeholders to track remediation efforts and ensure timely closure of findings. Identify, track, and remediate vulnerabilities in accordance with: Information Assurance Vulnerability Alerts (IAVAs), Operational Directives (OPDIRs). Perform vulnerability scanning and compliance validation using Assured Compliance Assessment Solution (ACAS). Assess and document system compliance with Security Technical Implementation Guides (STIGs). Utilize STIG checklists and Security Content Automation Protocol (SCAP) tools for validation. Develop and maintain system security documentation, including: System management procedures, Standard operating procedures (SOPs), Cybersecurity process documentation. Support Annual Security Reviews (ASRs) and assist in Verification and Validation (V&V) activities. Collaborate with Government and contractor personnel to ensure systems maintain continuous ATO compliance. Requirements Experience supporting cybersecurity efforts within DoD or federal environments. Strong knowledge of: Risk Management Framework (RMF), eMASS, ATO processes and lifecycle management. Experience with vulnerability management and remediation tracking. Familiarity with ACAS, STIGs, and SCAP compliance tools. Ability to create and maintain detailed cybersecurity documentation. Strong communication and coordination skills across technical and non-technical stakeholders. Prior experience supporting system accreditation and continuous monitoring activities. Candidates must reside within a reasonable distance of the Crane, IN area and be able to travel on-site periodically to support project requirements. Must be a U.S. Citizen. Ability to obtain and maintain a security clearance. Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience). Must have or be able to obtain CompTIA Security+ certification prior to start date. About TRISTAR TRISTAR is an SBA certified Service-Disabled Veteran-Owned professional services company supporting the U.S. Department of Defense programs. Our core competencies include Electronic Warfare, Enterprise Management, Full Spectrum Cybersecurity, Information Technology, Digital Transformation, Software Engineering and Development, Maritime Modernization and Engineering, and Technical Solutions. TRISTAR was founded in March 1995 and has built an employee-focused collaborative environment which enables our team of professionals to create and deliver customized solutions to meet our customers’ mission critical challenges. TRISTAR’s core capabilities support customers with end-to-end solutions. For over 30 years, TRISTAR has demonstrated and perfected our ability to successfully manage any task, small or large no matter how difficult or complex. TRISTAR is proud to serve the Department of Defense and other Federal Agencies. TRISTAR provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Responsibilities

The specialist will provide cybersecurity support to ensure compliance with DoD policies and maintain Authorization to Operate (ATO) packages within eMASS. They will also manage vulnerability remediation, perform security assessments using ACAS and STIGs, and maintain system security documentation.