Overview
SME Security Control Assessor
Onsite McLean, VA 5 Days a Week
Active TS / SCI, CI Poly Clearance Required
Summary
Our client is an information technology and cybersecurity company located in Ashburn, Virginia. They primarily serve government and enterprise clients, receiving a large number of their contracts from the United States Department of Defense.
Responsibilities
Our client is looking for multiple SME Security Control Assessors to join their team in supporting a federal client!
- Knowledge of Independent Verification & Validation (IV&V) of security controls
- Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction
- Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems working either alone or as part of a team
- Ensures integrity of IT systems by identifying and mitigating potential avenues of exploitation including system level attacks and user level attacks
- Applies experience with RMF, CNSSI 1253, NIST SP 800-53, and NISPOM
- Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)
Requirements
- 10+ years of overall technical related experience along with related cyber security experience
- 5+ years of expeirence working as a Security Control Assessor
- Compliance and vulnerability scanning tools XACTA - (highly preferred) , RedSeal, Nessus, Splunk, McAfee ePO, and / or other vulnerability scanners)
- Demonstrated experience conducting hands on security testing, analyzing results, documenting risks, and recommending countermeasures
- Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer / customer assessment systems against information assurance policies, regulations, and instructions
- Demonstrated experience providing threat analysis based on identified security vulnerabilities
- Develops and documents security evaluation test plans and procedures
- Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation
- Strong understanding of the Assessment and Authorization (A&A) process
- Excellent oral and technical writing skills
Preferred Requirements
Desired Certifications : CASP, CCNP Security, CISA, CISSP, GCED, or GCIH
Education / Certification Requirements
A Bachelor’s degree in Computer Engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline is required
Clearance Requirements
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information;
an active TS / SCI, CI Poly clearance is required. Additionally, a drug test on all applicants who have accepted an offer of employment will be conducted.
Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job.
Duties, responsibilities, and activities may change at any time with or without notice. About Us Northern Virginia-based Precision Solutions is an expert in staffing solutions for companies of any size that open the door to new opportunities and seek outstanding talent.
We pride ourselves on being versatile enough to tailor our relationships to the needs of each individual client, being agile in the fast-paced marketplace, and being precise in meeting the needs of any company.
Equal Opportunity Employer Statement Precision Solutions is an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
Security Control Assessor-Representative (SCA-R) SME
Develop and gain approval of the Security Assessment Plan (SAP) prior to assessment of all implemented security controls and technology areas through automated and manual assessments in accordance with NIST SP 800-53 and NIST SP 800-115. Security Control Assessor-Representative (SCA-R) SME. Develop ...
Junior Security Control Assessor- Hybrid Washington D.C.
Over 3 years of experience in cybersecurity programs, including security testing and/or security control assessments. Review Rules of Engagement, Security Assessment Plans, and Security Assessment Reports. Junior Security Control Assessor. This company is seeking a Security Control Assessor to join ...
Security Control Assessors
Security Control Assessor - II. Security Control Assessor - III. Active Top Secret/SCI security clearance. Experience developing and implementing security related directives and guidance for IA, IT, and IM. ...
Security Control Assessor - III
Execute formal on-site security control assessments, document findings in the Security Control Traceability Matrix (SCTM) and produce the Security Assessment Worksheet (SAW). Conduct comprehensive assessments of security controls within information systems (IS) to determine compliance and effectiven...
Security Control Assessor (SCA) Expert
Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations, and instructions o Demonstrated experience providing threat analysis based on identified security vu...
Security Control Assessor Test Engineers
Work closely with the Security Control Assessor to perform IT security assessments in support of Risk Management Framework (RMF). Security Control Assessor Test Engineers. Perform IT security assessments. Conduct Vulnerability Assessment of network, host, and web applications, leveraging tools such ...
Security Control Assessor - I
Execute formal on-site security control assessments, document findings in the Security Control Traceability Matrix (SCTM) and produce the Security Assessment Worksheet (SAW). Conduct comprehensive assessments of security controls within information systems (IS) to determine compliance and effectiven...
Security Control Assessor, Security Assurance Assessments
The AWS Security Assurance team is responsible for diving deep into industry requirements, maintaining regulatory and security requirements, and establish strategies to meet current and upcoming customer and regulatory security needs. We are looking for an assessor to join our Security Assurance Ass...
Security Controls Assessor
Qualifications and Skills: 5+ years of directly related experience in IT security compliance, including recent experience with NIST 800-53 Rev 5 "Security and Privacy Controls for Federal Information Systems and Organizations" Cloud computing security Security governance and policy Security risk ana...
Security Control Assessor, Security Assurance Assessments
The AWS Security Assurance team is responsible for diving deep into industry requirements, maintaining regulatory and security requirements, and establish strategies to meet current and upcoming customer and regulatory security needs. We are looking for an assessor to join our Security Assurance Ass...