Information System Security Specialist III

STAHL Companies provides the Program Management for its Channel of Commercial Technology companies in Government that consist of Small Businesses and New Technology start-ups.

STAHL advocates for policies that can improve government services and maintain our government's competitive advantage, by bringing more technology into government programs.

STAHL Companies advocates on behalf of our nation's innovative, new technology and small businesses looking to work with the U.S. government. We do this by aligning the voice of our small business members with advocacy for change in federal policy that will make the government market more accessible to small businesses and the commercial technology ecosystem.

The Channel's founding Technical Board Members include former government leaders and IT executives passionate about bringing best-of-breed technology to the government.

The Information System Security Specialist III is responsible for supporting cybersecurity and information assurance (IA) activities to ensure compliance with Department of Defense (DoD) and Department of the Navy (DON) security requirements. This role focuses on safeguarding information systems, supporting authorization processes, and implementing security controls across systems and environments.

Cybersecurity & Information Assurance: 

·         Implement and maintain security controls in compliance with DoD and DON policies 

·         Support system security posture and continuous monitoring activities 

Assessment & Authorization (A&A): 

·         Assist in the development and maintenance of A&A packages 

·         Support RMF processes, including system categorization, control selection, and authorization 

Security Tools & Compliance: 

·         Utilize tools such as eMASS and ACAS to track, assess, and report system vulnerabilities 

·         Ensure systems meet compliance standards and address identified risks 

Risk Management: 

·         Identify, assess, and mitigate cybersecurity risks and vulnerabilities 

·         Recommend corrective actions and track remediation efforts 

Documentation & Reporting: 

·         Prepare and maintain security documentation, including System Security Plans (SSPs) 

·         Provide reports on system security status and compliance metrics 

Collaboration & Support: 

·         Work with engineers, program managers, and stakeholders to integrate security into system lifecycle 

·         Support audits, inspections, and security assessments

·         Information Assurance Technician (IAT) Level I certification (minimum requirement) 

·         Completion of required training in accordance with: 

o    SECNAV M-5239.2 

o    DoD 8570.01-M
 (Dates of most recent training completion must be provided)

·         Bachelor’s degree in a technical or managerial discipline, OR 

·         High school diploma (or equivalent) with additional years of relevant experience 

·         5+ years of relevant experience in: 

o    Cybersecurity 

o    Systems engineering 

o    Test & Evaluation (T&E) 

o    Assessment & Authorization (A&A), formerly Certification & Accreditation (C&A) 

·         7+ years of experience required in lieu of a college degree 

·         Experience with Information Assurance and cybersecurity tools, including: 

o    DISA Enterprise Mission Assurance Support Service (eMASS) 

o    Assured Compliance Assessment Solution (ACAS) 

·         Familiarity with Risk Management Framework (RMF) processes 

·         May be required to hold or obtain Security Control Assessor (SCA) qualification 

*Position is contingent upon award.
Location: Newport, Rhode Island, United States
To know more about the company, visit Stahl Companies (stahlusa.us)

The Information System Security Specialist III is responsible for supporting cybersecurity and information assurance (IA) activities to ensure compliance with Department of Defense (DoD) and Department of the Navy (DON) security requirements. This role focuses on safeguarding information systems, supporting authorization processes, and implementing security controls across systems and environments.