Security Control Assessor, Mid

This is a fully remote position, open to applicants in Maryland, +2 more states.

📋 Description

• Perform cybersecurity assessments, audits, and inspections for Department of Defense (DoD) organizations and their partners.

• Assess systems and Defensive Cyberspace Operations through cyber threat emulation and performance-based testing.

• Adhere to policies and procedures relevant to each assessment type.

• Assist in the development and execution of assessments.

• Coordinate logistics, test plans, and scope in collaboration with the SCA Team Lead.

• Conduct vulnerability assessments and record results using STIG Viewer or other specified tools.

• Document findings in the eMASS system.

• Analyze security deficiencies and offer mitigation strategies.

• Validate cybersecurity controls, tactics, techniques, procedures (TTPs), STIGs, Risk Management Framework (RMF) controls, and compliance with DoD policies and standards.

• Provide risk analysis and assessment results to support authorization recommendations.

• Engage in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.

• Contribute to a cybersecurity risk management and assessment program for a DoD client.

⛳️ Requirements

• Bachelor's degree, preferably in an IT-related field.

• A minimum of five (5) years of overall experience in cybersecurity or network security.

• At least three (3) years of experience in a Certification and Accreditation/A&A role.

• Must possess and maintain an active DoD Top Secret clearance with SCI eligibility.

• DoD 8570 IA Technical (IAT) Level II certification required.

• Familiarity with STIGs, SRGs, Plans of Action and Milestones (POA&Ms), and cybersecurity best practices.

• Strong understanding of the RMF process, including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253.

• Experience with eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS.

• Knowledge of Network, Mobility, Windows, UNIX, Cloud Environments, Cloud Native Tools/Services, HBSS/ESS, Databases, and Applications.

• Excellent written and verbal communication skills for reporting assessment results.

• Valid U.S. Passport or ability to obtain one promptly.

• Strong preference for candidates living in or willing to relocate to the DMV area or Pennsylvania.

🏝️ Benefits

• 26 Days of Paid Leave, encompassing vacation, sick, personal time, and holidays.

• Performance bonuses based on individual contributions and company-wide achievements.

• 401(k) plan with a 3% company match and immediate vesting benefits.

• Company-paid life insurance coverage up to $300K, with options for additional coverage.

• A variety of medical plans, along with dental, vision, FSA, and HSA options.

• 15 days of fully paid parental leave.

• Military differential pay available.

• Paid training and certification opportunities.

• Tuition reimbursement for further education.

• Provision of tools and technology necessary to succeed in your role.

• 80% of net proceeds returned to employees in the event of a company sale.