IT CYBERSECURITY SPECIALIST (CUSTSPT/INFOSEC)

Defense Finance and Accounting Services (DFAS) mission is to lead the Department of Defense (DoD) in finance and accounting by ensuring the delivery of efficient, exceptional quality pay and financial information.

Serves as senior Security Control Assessor leading assessments of information systems. Applies experience as network engineer, web administrator, developer, or DBA using Nessus, Fortify, or Burp Suite to evaluate security control effectiveness.

Plans, develops, and executes detailed security assessment plans for management, operational, and technical controls per RMF, NIST 800-53, and DoDI 8510.01. Performs hands-on technical testing across networks, web applications, databases, and cloud.

Identifies system weaknesses and vulnerabilities in complex IT environments through comprehensive testing using eMASS, Tenable Nessus, Fortify, and Burp Suite. Analyzes results to determine residual risk and control effectiveness.

Prepares comprehensive assessment reports, risk documentation, and authorization packages. Provides technically sound recommendations to leadership, SCA, Authorizing Officials, and senior leaders on system risk posture.

Serves as technical authority and mentor to junior assessors and IT staff. Provides expert guidance on secure system configuration, RMF processes, security tool usage, and mitigation strategies for complex enterprise systems.