Job description

Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent. Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, and Bedford, IN, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team. Barbaricum is seeking an Information Assurance Specialist I (Information Security Analyst) to support cybersecurity compliance, risk management, and security control assessment activities for Department of Defense (DoD) systems. The selected candidate will assist in evaluating security controls, supporting Security Assessment and Authorization (SA&A) efforts, and maintaining compliance with applicable cybersecurity frameworks and regulatory requirements. The Information Assurance Specialist will support continuous monitoring and ongoing authorization activities, collaborate with technical teams to strengthen system security, and help ensure compliance with the Risk Management Framework (RMF), NIST standards, and DoD cybersecurity policies. The successful candidate will contribute to the protection and operational readiness of mission-critical information systems and infrastructure. Responsibilities: Support cybersecurity compliance, risk management, and information assurance activities for Department of Defense (DoD) systems and networks. Assist in assessing and validating security controls in accordance with NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DoD requirements. Support the Security Assessment and Authorization (SA&A) process by reviewing control implementations, identifying risks, and documenting findings. Participate in continuous monitoring and ongoing authorization activities to help maintain system security posture and compliance. Assist with vulnerability assessments, security reviews, and remediation tracking efforts across enterprise environments. Collaborate with system administrators, engineers, and cybersecurity personnel to implement and maintain required security controls. Develop and maintain cybersecurity documentation, including assessment reports, compliance artifacts, and authorization support materials. Monitor security-related activities and provide recommendations for risk mitigation and control improvements. Support compliance with the Risk Management Framework (RMF), organizational policies, and applicable federal and DoD cybersecurity standards. Stay informed on cybersecurity threats, vulnerabilities, and best practices to support effective information assurance operations. Required Qualifications: Active DoD Secret Clearance Bachelor's degree in related field. Meet DoDM 8140.03 IAT III/IAM II requirements Minimum 2yr experience in network operations and information security. Demonstrated experience assessing security controls based on cybersecurity principles and tenets. (e.g., NIST SP 800-53, Cybersecurity Framework, etc.). In-depth understanding of relevance of NIST Security Controls and Control Implementation methodologies to the SA&SA process. Demonstrated experience with continuous monitoring/ongoing authorization.es EEO Commitment All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Requirements

Must-haves

Support cybersecurity compliance, risk management, and information assurance activities for Department of Defense (DoD) systems and networks.
Assist in assessing and validating security controls in accordance with NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DoD requirements.
Support the Security Assessment and Authorization (SA&A) process by reviewing control implementations, identifying risks, and documenting findings.
Participate in continuous monitoring and ongoing authorization activities to help maintain system security posture and compliance.
Assist with vulnerability assessments, security reviews, and remediation tracking efforts across enterprise environments.
Collaborate with system administrators, engineers, and cybersecurity personnel to implement and maintain required security controls.
Develop and maintain cybersecurity documentation, including assessment reports, compliance artifacts, and authorization support materials.
Monitor security-related activities and provide recommendations for risk mitigation and control improvements.
Support compliance with the Risk Management Framework (RMF), organizational policies, and applicable federal and DoD cybersecurity standards.
Stay informed on cybersecurity threats, vulnerabilities, and best practices to support effective information assurance operations.
Active DoD Secret Clearance
Bachelor's degree in related field.
Meet DoDM 8140.03 IAT III/IAM II requirements
Minimum 2yr experience in network operations and information security.
Demonstrated experience assessing security controls based on cybersecurity principles and tenets. (e.g., NIST SP 800-53, Cybersecurity Framework, etc.).
In-depth understanding of relevance of NIST Security Controls and Control Implementation methodologies to the SA&SA process.
Demonstrated experience with continuous monitoring/ongoing authorization.es
EEO Commitment

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: greenhouse
Effort: quick