UNKNOWN

ADAPTED_NOW

This role performs verification and validation of low to moderately complex systems to ensure compliance with federal security requirements. We are representing a Level 3 Security Control Assessor supporting certification and validation of secure information systems.

<div>Security Control Assessor Location: Fort Meade, MD Salary: $225K-235K Clearance Required: Active TS/SCI with Full Scope Polygraph Employment Type: Full-Time We are representing a Level 3 Security Control Assessor supporting certification and validation of secure information systems. Position Overview This role performs verification and validation of low to moderately complex systems to ensure compliance with federal security requirements. Core Responsibilities • Conduct on-site evaluations • Perform vulnerability assessments • Coordinate penetration testing • Draft verification and validation reports • Identify non-compliance and recommend mitigation • Draft security standards and guidelines Qualifications • 12+ years in cybersecurity or systems engineering • Recent experience across five cybersecurity domains • DoD 8570 IAT III or IAM III required</div>

Gables Search Group headquartered in Cleveland, Ohio has been a leader in search and placement nationwide since 2002.  Our company specializes in both direct and contract (temporary) staffing in all industries and disciplines.
At Gables Search Group, we connect exceptional professionals with outstanding organizations.  Our commitment to integrity, excellence, partnership, innovation, and respect sets us apart. With a personalized approach to recruitment, we ensure the perfect match between candidates and employers.
Whether you are a talented professional seeking new opportunities or an organization looking to build a high-performing team, Gables Search Group is here to guide you through the journey. Our success is built on the success of our clients and candidates, and we are dedicated to making a positive impact on the careers and businesses we serve.

Gables Search Group

Security Control Assessor - ( TS/SCI FS Poly Required)

Computer Security

Data Quality

DoD Directive 8140

DoD Directive 8570

Federal Compliance Regulations

Full Scope Polygraph

IAM - Information Assurance Management

IAT - Information Assurance Technical

Information/Data Security (InfoSec)

Internet Security

Maintain Compliance

Penetration Testing

Security Compliance

Sensitive Compartmented Information (SCI)

Site Evaluation

System Validation

Systems Engineering

Top Secret Clearance

Validation Testing

OTHER

FEED

YEAR

Responsibilities:
We are seeking an experienced Security Control Assessor Representative to accomplish the following:<ul style="margin-top: 0in;"><li>Conduct assessments and facilitate risk mitigation planning.</li><li>Provide Assessment and Authorization (A&A) for the ARCYBER cloud infrastructure.</li><li>Execute a security control assessment plan and update the System Security Plan.</li><li>Review vulnerability scans and remediation.</li><li>Implement risk management programs by utilizing NIST, FISMA, HIPAA, and PII -- and document solutions.</li><li>Monitor the privacy landscape regarding all data (privacy, protection, classification, and residency).</li><li>Assist clients with identifying gaps within existing privacy programs and designing solutions to help address those challenges.</li><li>Scan, test, and validate systems/networks/applications to obtain/maintain an ATO under NIST/FISMA guidelines.</li></ul>*This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area. 

Qualifications:
Required Qualifications:<ul style="margin-top: 0in;"><li>Education: Bachelor’s degree and 8+ years of experience, or Master’s and 6+ years of experience, or PhD and 3+ years of experience. A degree in one of the following fields of study is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science. However, an additional 4 years of relevant experience or specialized training may be considered in lieu of Bachelor's degree.</li><li>Security Clearance: Active Top Secret with SCI eligibility.</li><li>Certifications: Active IAT Level II certification (CompTIA Security+ preferred).</li><li>Must have knowledge of enterprise solutions across multiple cloud operating environments (JWICS, SIPRNET, NIPRNET, and commercial Internet).</li><li>Must have eMASS, ACAS, and ISC2 Certified Cloud Computing Professional (CCSP) or CompTIA Cloud+ experience.</li><li>Must have knowledge in the following areas:<ul style="margin-top: 0in;"><li>Knowledge of computer networking and/or cloud computing concepts and protocols, and network security methodologies.</li><li>Knowledge of cyber threats and vulnerabilities in a virtualized environment.</li><li>Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.</li><li>Knowledge of risk management framework processes (e.g., methods for assessing and mitigating risk).</li><li>Knowledge of specific operational impacts of cybersecurity lapses.</li><li>Knowledge of industry methods for evaluating, implementing, and disseminating Information Technology (IT) security assessment, monitoring, detection, and remediation tools and procedures using standards-based concepts and capabilities.</li><li>Knowledge of cyber defense and vulnerability assessment tools, including opensource tools, and their capabilities.</li><li>Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).</li><li>Knowledge of cybersecurity principles used to manage risks related to the use, processing, storage, and transmission of information or data in a cloud environment.</li><li>Knowledge of IT and cloud computing security principles and methods (e.g., firewalls, demilitarized zones, encryption).</li><li>Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins.</li><li>Knowledge of network and/or cloud computing environment security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).</li><li>Knowledge of penetration testing principles, tools, and techniques..</li><li>Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return oriented attacks, malicious code).</li><li>Knowledge of the Security Assessment and Authorization process.</li><li>Skill in determining how a security and/or cloud computing security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.</li><li>Skill in discerning the protection needs (i.e., security controls) of information systems and networks and those relating to cloud computing.</li><li>Knowledge of local specialized system requirements (e.g., critical infrastructure systems that may not use standard IT) for safety, performance, and reliability.</li></ul></li></ul>

Peraton Overview:
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit <a href="http://peraton.com/" target="_blank" rel="noopener">peraton.com</a> to learn how we’re keeping people around the world safe and secure.

Target Salary Range:
$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO:
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our employees do the can’t be done, solving the most daunting challenges facing our customers.

Peraton

Security Control Assessor Representative

[AW]-iCims

Candidates should bring over 12 years of experience in cybersecurity or systems engineering, with recent experience spanning five different cybersecurity fields. Key tasks include conducting compliance evaluations on-site, managing vulnerability assessments, and organizing penetration testing activities.

Located near Fort Meade, this full-time position is represented by She Recruits and involves ensuring secure information systems meet federal security standards. The role includes assessing and verifying less complex systems, aimed at maintaining regulatory compliance and cybersecurity integrity. Key tasks include conducting compliance evaluations on-site, managing vulnerability assessments, and organizing penetration testing activities. Additionally, this position requires the preparation of detailed reports on verification and validation processes, as well as identifying and suggesting improvements for any non-compliance issues. Drafting comprehensive security standards and guidelines is also a core responsibility. Candidates should bring over 12 years of experience in cybersecurity or systems engineering, with recent experience spanning five different cybersecurity fields. A DoD 8570 IAT III or IAM III certification is mandatory.

Aminov Search Partners

Security Control Assessor

Assessor Jobs in Forest Hill, VA

Assessor Jobs in Forest Hill, VA

Resume Resources

Similar Job Searches

Get noticed by top employers!

Assessor Jobs in Forest Hill, VA

Security Control Assessor - ( TS/SCI FS Poly Required) Gables Search Group

Security Control Assessor Representative Peraton

Security Control Assessor Aminov Search Partners

Resume Resources

Similar Job Searches