Information Assurance Analyst

Join SMX as an Information Assurance Analyst and become a key contributor of our IA team in Key West, FL!  As a member of the IA team, you will be responsible for a variety of IA duties, including providing guidance and support in the implementation of the Risk Management Framework (RMF) via eMASS and ensuring the security and integrity of our client's information systems. This role requires a strong understanding of DoD security policies and procedures, as well as experience with vulnerability assessment and mitigation techniques. A solid understanding of networking and system administration principles is also essential.

This position requires a DoD Secret security clearance with the ability to obtain TS/SCI which requires US citizenship for work on DoD contracts.

Responsibilities:

• Perform assessment and authorization (A&A) coordination, assisting clients through the RMF process to achieve and maintain system accreditation
• Develop and maintain comprehensive A&A packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
• Assist the Information Assurance team with conduct security evaluations and vulnerability assessments using tools such as ACAS and Nessus
• Collaborate with network and system administrators to implement security controls and remediate vulnerabilities
• Provide subject matter expertise on DoD and IC RMF, assisting with the development and execution of the RMF program
• Maintain and track client connection approval packages, ensuring compliance with DoD connection standards
• Assist the Information Systems security Manager (ISSM) in perform risk and vulnerability assessments of IT and IS for accreditation, preparing risk assessment reports for submission to the Security Controls Assessor/Certification Authority (SCA/CA) and Authorizing Official/Designated Accrediting Authority (AO/DAA)
• Assist USSOUTHCOM and its Component Commands with the enforcement of A&A and DoD connection standards
• Track and maintain A&A databases, web sites, and tools to ensure proper documentation and management of networks, systems, and devices from a security perspective
• Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies
• Validate system patching, perform validation scanning, develop POA&Ms, and report as directed by applicable policies, procedures, and regulations
•  

Required Qualifications:

• Active DoD Top Secret Clearance with ability to pass a TS/SCI investigation
• Bachelor's Degree in computer or systems science discipline (or equivalent experience)
• Three (3) years of progressive, relevant experience in information assurance
• Experience with the US DoD commands
• Solid understanding of Risk Management Framework (RMF)
• Excellent communication skills and interpersonal skills
• Knowledge and experience with DOD IA processes and policies (eg, CJCSM 651001, Incident Response and other IA policies)
• Willingness to perform general administrative IA tasks as a member of the team

Desired Qualifications:

• DOD Information Assurance Management (IAM) Level 2 certification (strongly preferred)
• Navy Validator Information Assurance certification
• Previous Information Systems Security Manager and Insider Threat experience
• Knowledge of Telos Xacta or eMASS

Application Deadline:  July 21, 2025

#CJPOST #LI-KK1

The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement.