Security Control Assessor, Senior

AGE Solutions is looking for a Security Control Assessor, Senior to join our team in support of a cybersecurity risk management and assessment program with our DoD customer. The Assessors will be part of a project team responsible for Cybersecurity Assessments and Authorization (A&A), Risk Management, Information Assurance (IA) Support, and Risk Adjudication and Connection services.

Responsibilities Include:

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution to ensure security expertise is properly applied.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.
• Mentor and guide personnel by providing technical expertise, best practices, and professional development support to enhance team capabilities and knowledge

Position Requirements:

• Bachelor's degree (IT-related field preferred)
• Eight (8) years of overall experience in cybersecurity or network security position
  • Five (5) years of experience in a Certification and Accreditation/A&A role
• Have an active DoD Top Secret clearance with SCI eligibility
• DoD 8570 IAM/IA Technical (IAT) Level II certification
• Demonstrated experience with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
• Advanced understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
• Demonstrated experience with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
• Advanced understanding of key technologies areas/domain such as: Network, Mobility, Windows, UNIX, Cloud Environments and Cloud Native Tools/Services, Host Based Security System (HBSS)/Endpoint Security Solutions (ESS), Databases, Applications
• Strong written and verbal communication skills for reporting assessment findings.
• Location: This is a remote role requiring approximately 85% travel, Local, CONUS and OCONUS. Candidates must possess a valid U.S. Passport or have the ability to obtain one in a timely manner.
  • Strong preference will be given to candidates who currently reside in the DMV (Washington, DC, Maryland, Virginia) region or Pennsylvania, or who are willing to relocate to one of these areas to support customer requirements and team collaboration activities.

The projected salary range for this position is $90,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.