Security Control Assessor, Jr

Customer Site - Alexandria, VAfull timeRemote

Apply on Employer Site

entry

H1B: no

Agecareers Junior Security Control Assessor conducting cybersecurity assessments and audits for DoD organizations. Supports risk management and compliance with DoD cybersecurity policies and guidelines.

Responsibilities

Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
Adhere to policies and processes for each assessment type.
Support assessment development and execution to ensure security expertise is properly applied.
Coordinate logistics, test plans, and scope with the SCA Team Lead.
Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
Analyze security gaps and provide mitigation recommendations.
Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
Provide risk analysis and assessment results for authorization recommendations.
Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.

Qualification

Education and CertificationsCitizenship and ClearanceUS Citizenship is requiredSkills and KnowledgeStrong understanding of the RMF process

Required

Education and Certifications:
Bachelor's degree (IT-related field preferred)
DoD 8570 IA Technical (IAT) Level II certification
Five (5) years of overall experience in cybersecurity
One (1) to three (3) years of experience in a C&A / A&A role
Citizenship and Clearance:
US Citizenship is required.
Must have and maintain an active DoD Top Secret clearance with SCI eligibility
Skills and Knowledge:
Demonstrated experience with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
Strong understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
Demonstrated experience with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS