assessment-and-authorization-a-a jobs in San Diego

As an information security risk specialist, you will assess cyber risks for DoD acquisition programs by analyzing threat landscapes, conducting risk and vulnerability assessments across networks, systems, and applications, and developing mitigation plans. You will leverage 4+ years of IT experience and 3+ years of Navy RMF/A&A project leadership to translate complex security concepts into actionable strategies for mission-critical systems.…See more Key responsibilities include developing and maintaining RMF artifacts, managing eMASS workflows, creating Authorization Boundary and Data Flow Diagrams, conducting compliance assessments using industry-standard tools, and communicating technical findings to both technical and non-technical stakeholders.

As an information security risk specialist, you will work with DoD acquisition programs to identify cyber risks, assess threat landscapes, and develop mitigation strategies. You will conduct risk and vulnerability assessments across networks, systems, and applications, translate security concepts for stakeholders, and manage RMF (Risk Management Framework) and A&A (Assessment and Authorization) activities.…See more You need 4+ years of IT systems experience with DoD/government agencies, 3+ years leading Navy RMF projects, and expertise in security policy implementation, compliance assessment, and vulnerability mitigation. A Secret clearance and DoD 8140 Certification are required.

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military infrastructure, performing risk and vulnerability assessments across networks, systems, and applications. You will leverage tools like ACAS, STIGs, and eMASS to assess security threats, implement infrastructure controls, and prepare Risk Management Framework (RMF) artifacts and Security Assessment Plans (SAP) for DoD customers.…See more You'll troubleshoot complex cybersecurity challenges, analyze big data security events to identify advanced threats, and communicate technical findings to both technical and non-technical audiences. The role requires 3+ years of IT experience with government/DoD agencies, hands-on RMF and A&A leadership, and an active TS/SCI clearance.