Information Systems Security Specialist II

Ellumen
90-100k
United States, Virginia, Norfolk
Apr 16, 2025
Ellumen, a three-time Top Workplace honoree by the Washington Post, is a dynamic IT business headquartered in Silver Spring, MD. We specialize in providing a broad range of information technology and related services to both government and commercial customers. Ellumen is seeking an experienced Information Systems Security Specialist II to become part of our diverse Agile team, providing support to the JOMIS suite of Navy Defense Health applications. This program offers engineering, integration, and lifecycle support for TMIP and JOMIS medical applications. You will be part of a cutting-edge Agile team that focuses on cybersecurity, testing, training, fleet support, release management, and reporting. Our mission is the sustainment and modernization of clinical information systems to ensure secure data flow and privacy protection within integrated health IT systems, including client-server and custom web applications. Responsibilities: Analyze and define security requirements. Assists in the design, development, and implementation of solutions. Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs. Assists in the performance of risk analysis which includes risk assessment. This is not a complete list of responsibilities. Other tasks may be required as needed. Qualifications: US Citizenship with ability to obtain/maintain Secret or Top-Secret clearance (Active clearance preferred). Three (3) years of practical experience demonstrating competency in Cybersecurity, Engineering, Test & Evaluation (T&E) or Assessment & Authorization (A&A)/ Certification & Accreditation (C&A) related field. Demonstrated working knowledge of the Risk Management Framework (RMF) process and/or include prior experience with the Defense Information Assurance & Certification Accreditation Process (DIACAP). Experience working with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS) and may be required to hold an Interim Security Control Assessor qualification. Familiarity with security policies & guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents purposed for compliance with Authority to Operate (ATO) requirements. Must be capable of evaluating security solutions to ensure they meet security requirements for processing up to classified information, and supervise and/or maintain the operational security posture for an information system or program. One (1) year of experience with software development and testing to include deployment and validation of the developed software solution OR experience with a specific software application(s) required of the task order and experience how the required software application interacts in concert with other or new software applications. One (1) year of this experience must be in support of defense health requirements. Individual must meet the latest Cybersecurity workforce certification/training in accordance with DoD 8570.1M and subsequent DoD 8140 manual, as applicable.