Authorization & Accreditation Specialist

Job Description
WarCollar Industries has an immediate opportunity for an experienced
Assessment and Authorization (A&A) Specialist
to support our customer and national security mission on the SKYNET contract in Herndon, VA. The A&A Specialist will support the assessment, authorization, and ongoing security compliance of classified information systems, networks, and enclaves. This individual will play a critical role in identifying security vulnerabilities, evaluating system configurations, mitigating risks, and ensuring compliance with applicable federal security requirements and government policies.

The ideal candidate will bring hands-on experience with the Risk Management Framework (RMF), ICD 503, security assessments, and vulnerability scanning, along with the ability to develop and maintain security documentation and support system accreditation activities.

Key Responsibilities

• Conduct security assessments of information systems, networks, and enclaves to identify deviations from approved security configurations, organizational policies, and applicable government security standards.
• Perform passive security evaluations, including compliance audits, and active assessments, including vulnerability scanning and security testing.
• Support the Assessment and Authorization (A&A) process by establishing and maintaining security controls, tracking risk mitigation efforts, and facilitating system certification and accreditation.
• Develop, review, and maintain security documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), assessment reports, and supporting authorization artifacts.
• Provide direct support for establishing and maintaining network and system accreditations, special approval authorizations, and security compliance requirements.
• Apply applicable Information Assurance (IA) and Information Security (INFOSEC) policies and standards, including ICD 503, NIST, CNSS, and other U.S. Government security guidance.
• Conduct security control assessments to validate established security requirements and recommend additional safeguards to strengthen system security postures.
• Support formal Security Test and Evaluation (ST&E) activities, including pre-test preparation, test execution, results analysis, and preparation of required assessment reports.
• Utilize vulnerability assessment tools, including Rapid7 Nexpose, to identify, analyze, document, and support remediation of security vulnerabilities.
• Conduct periodic reviews of system security assessments, audits, and corrective actions to ensure identified deficiencies are properly addressed and closed.
• Support security engineering activities, including system architecture reviews, requirements analysis, security requirements decomposition, and system performance testing and verification.
• Provide day-to-day administration and technical guidance for information systems security programs, supporting security design, consultation, and implementation across customer initiatives.
• Coordinate with system owners, engineers, security personnel, and government stakeholders to resolve security issues and maintain continuous authorization and compliance.

,

Required Skills

• Minimum of 3 years of experience supporting Assessment and Authorization (A&A), Certification and Accreditation (C&A), or Risk Management Framework (RMF) activities.
• Familiarity with ICD 503 and applicable government security policies, standards, and authorization requirements.
• Hands-on experience with Rapid7 Nexpose vulnerability scanning, including reviewing scan results, identifying vulnerabilities, and supporting remediation efforts.
• Demonstrated understanding of information systems security administration, security architecture, and technology implementation.
• Experience developing, reviewing, and maintaining security documentation, including SSPs, POA&Ms, and security assessment reports.
• Knowledge of security control assessments, vulnerability management, risk analysis, and security compliance processes.
• Experience supporting systems analysis, systems integration, requirements analysis, process development, and project coordination.
• Ability to provide technical guidance to system users and stakeholders on information systems security matters.
• Strong written and verbal communication, organizational, interpersonal, and briefing skills.
• Ability to manage multiple priorities and support moderately complex technical projects in a collaborative environment.

,

About WarCollar Industries
About us:
WarCollar Industries, LLC is a veteran-owned small business. We maintain a team of cybersecurity experts committed to protecting complicated data and distribution systems and providing decision makers with the most accurate assessment of residual risk possible. We work with our clients to solve the toughest challenges in the ever-evolving digital landscape. Services include network defense, computer network attack, secure network design, penetration testing and vulnerability assessment. WarCollar enables its clients to find, fix, stop, and ultimately solve cybersecurity problems across their entire enterprise.

WarCollar offers generous benefits including: Medical insurance premium coverage; PTO based on billable hours; federal holidays plus your birthday; matching 401k, education reimbursement plus paid training days; performance bonuses; referral bonuses; government shutdown protection; monthly team building events plus two major social events annually.

WarCollar Industries, LLC is an equal opportunity employer. WarCollar does not discriminate in employment based upon race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, status as a protected military veteran, or other non-merit factor.