Information Assurance Security Administrator

Provides day-to-day cybersecurity operations support for DDSB services, ensuring systems remain compliant, monitored, and ready for inspection. This role bridges operational teams and security governance by enforcing secure configurations and supporting continuous monitoring.

Key Tasks & Responsibilities:
• Support the ISSO mission by ensuring DHA managed systems comply with DoD/DHA IA policy, vulnerability alerts, IAVAs, and USCYBERCOM (United States Cyber Command)/DHA advisories.
• Keep RMF (Risk Management Framework) status current in eMASS (Enterprise Mission Assurance Support Services).
• Track and report key RMF deliverables (risk assessments/acceptance, A&A (accreditation and authorization) actions, CCI (Control Correlation Identifier) completion, POA&Ms (Plans of Action and Milestones)); recommend corrective actions and process improvements.
• Perform vulnerability/compliance scans and validation using ACAS (Nessus/Security Center), DISA STIG Viewer, SCC, MECM, and manual checks; validate patches and remediation effectiveness.
• Maintain accurate asset inventories in ACAS and eMASS and sustain credentialed scan coverage by resolving non-credentialing, dead, or misconfigured assets.
• Create and manage POA&Ms through closure with mitigation actions and milestone dates.
• Coordinate remediation of missing patches and security gaps with DHA offices and technical teams.
• Maintain and review logs/audit records and audit authentication/password policy compliance; document security impacts of system changes and interfaces.
• Maintain RMF artifacts/evidence (test results, inventories, policies/procedures, diagrams, PPSM (Ports, Protocols, and Services Management) entries, inheritances, supporting documentation) and submit required eMASS updates/packages for accreditation decisions.
• Report security incidents/violations within required timelines.
• Develop/test IR procedures, COOP (Continuation of Operations), and ISCP (Information System Contingency Plan) plans.
• Upload plans and after-action products and support continuous monitoring and annual reviews.

Education & Experience :
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Data Science, Engineering, Mathematics, or a closely related discipline or equivalent practical experience (as permitted by the contract).
• Minimum 4 years of relevant experience supporting enterprise IT environments, with demonstrated work aligned to Information Assurance.

Certifications:
• At least one: CGRC/CAP, CASP+, Cloud+, PenTest+, Security+, or GSEC.
• Alternate/equivalent certifications may be accepted with Government approval.
• Preferred/Work-center dependent: Microsoft Certified: Azure Administrator Associate or Microsoft Certified: Windows Server Hybrid Administrator Associate.

Security Clearance :
• Must be able to obtain and maintain Public Trust suitability and all required system access (e.g., CAC-enabled accounts) to perform duties.

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.):
• Work is primarily on-site in San Antonio, TX; limited remote work may be allowed when authorized by the Government and mission requirements permit. Work may require after-hours, weekend, and/or on-call support as directed, including support during scheduled maintenance windows, high-impact incidents, vulnerability response actions, inspections, and surge periods.
• This position is aligned to applicable DoD Manual 8140.03 work role 805 (NIST: OV-PM-005); contractor personnel must meet DoD 8570.01-M baseline certification requirements and transition to DoD Manual 8140.03 work role requirements, including required training, knowledge, skills, abilities, and tasks, within Government-directed timelines.

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.
Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [email protected].