Information Assurance Specialist

Seneca Technologies is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings’ federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn.

Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs.  We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

Seneca Technologies is hiring for an Information Assurance Specialist. The Information Assurance Specialist II provides cybersecurity, risk management, and compliance support within a Department of War (DOW) agency contractor environment. This hands-on role is responsible for driving vulnerability assessment, system security engineering, and ensuring information systems maintain a robust security posture in compliance with federal and defense frameworks, including NIST 800-37 and Risk Management Framework (RMF) guidelines.

Key Responsibilities:

• Vulnerability Assessment & Analysis: Conducts vulnerability scans and assessments, analyzes findings, and recommends effective remediation paths forward.
• Remediation Management: Tracks remediation status, coordinates vulnerability resolution efforts, and supports compliance reporting.
• Framework Compliance: Execute and oversee Information Assurance (IA) and cybersecurity processes directly aligned with DoD/DoW frameworks, DISA STIGs, and applicable policies.
• Authorization & Documentation: Manage security documentation, artifacts, and authorization packages (such as ATO packages, POA&Ms, and vulnerability tracking mechanisms).
• Technical Advisory: Serve as a technical advisor on security configurations, assisting system administrators and engineers in maintaining optimal security baselines across DoW networks.
• Continuous Monitoring: Monitor system logs, security events, and compliance reports to detect anomalies or potential security posture degradations.

Qualifications & Requirements:

• Possess current Secret clearance plus one of the following:
• Bachelor’s Degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field, plus 3+ years of experience in RMF or system security
• Or 7+ years of directly relevant security engineering or cyber experience without a degree.

Technical Skills & Knowledge

• Comprehensive understanding of DoW RMF, NIST 800-37, and security authorization processes.
• Demonstrated hands-on experience evaluating security vulnerabilities and compliance on DoW networks.
• Proficiency in handling DISA STIGs, vulnerability scanners, POA&Ms, and authorization packages.

Location: Mechanicsburg, PA Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.

Clearance: Active Secret