SECURITY CONTROL ASSESSOR-INTERMEDIATE

3 weeks ago

St Louis, United States Quantum Research International Full time
 

Overview:

Quantum Research International, Inc. (Quantum) provides our national defense and federal civilian and industry customers with services and products in the following main areas: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air and Missile Defense, and Fires Support Systems; 5) Intelligence Programs Support; 6) Experimentation and Test; 7) Program Management; and (8) Audio/Visual Technology Applications. Quantum's Corporate Office is located in Huntsville, AL, but Quantum actively hires for positions nationwide and internationally. We pride ourselves on providing high quality support to the U.S. Government and our Nation's Warfighters. In addition to our corporate office, we have physical locations in Aberdeen, MD; Colorado Springs, CO; Shalimar, FL; and Tupelo, MS.

Mission:

The SECURITY CONTROL ASSESSOR (Intermediate) conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls (as defined in NIST 800-37).

Responsibilities: 

  • Manage and approve Accreditation Packages (e.g., ISO/IEC 15026-2).
  • Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.
  • Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.
  • Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
  • Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).
  • Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.
  • Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
  • Verify and update security documentation reflecting the application/system security design features.
  • Ensure that security design and cybersecurity development activities are properly documented (providing a functional description of security implementation) and updated as necessary.
  • Ensure that all acquisitions, procurements, and outsourcing efforts address information security requirements consistent with organization goals.
  • Assess the effectiveness of security controls.
  • Assess all the configuration management (change configuration/release management) processes.

 Requirements:

  • Bachelor’s degree. In lieu of degree, Security+, CGRC/CAP, CASP+, Cloud+, PenTest+, or GSEC may be accepted.
  • Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
  • Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
  • Ability to identify systemic security issues based on the analysis of vulnerability and configuration data.
  • Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.
  • Knowledge of cyber threats and vulnerabilities 
  • Ability to prepare and present briefings and technical documentation.
  • Ability to collect, verify, and validate test data.
  • Knowledge of cyber defense and vulnerability assessment tools and their capabilities. 
  • Ability to ensure security practices are followed throughout the acquisition process.
  • Ability to apply collaborative skills and strategies.
  • Ability to apply critical reading/thinking skills.
  • Ability to effectively collaborate via virtual teams.
  • Ability to evaluate information for reliability, validity, and relevance.
  • TS/SCI eligible, subject to CI Polygraph.
  • IAT or IAM Level 2

Desired/Preferred Skills:

  • Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes. 
  • Skill in network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tool
  • #LI-JL-1

Equal Opportunity Employer/Affirmative Action Employer M/F/D/V:  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity, or any other characteristic protected by law. *Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

 

  • Secure Software Assessor

    3 weeks ago

    St Louis, Missouri, United States Quantum Research International Full time

    Job Summary:Quantum Research International, Inc. is seeking a highly skilled Secure Software Assessor - Intermediate to join our team. As a member of our NGA DEFENDER Cybersecurity Software Assurance team, you will play a critical role in determining the risk of using commercial, government, and open-source software within NGA and employing software code...

  • Security Control Assessor

    4 weeks ago

    St Louis, Missouri, United States Amyx Full time

    Job Title: Security Control AssessorAt Amyx, we are seeking a highly skilled Security Control Assessor to join our team. As a key member of our Cybersecurity Division, you will play a critical role in ensuring the security and integrity of our systems and networks.Responsibilities:Conduct comprehensive security authorization reviews and assurance case...

  • SECURITY CONTROL ASSESSOR-INTERMEDIATE

    4 months ago

    St. Louis, United States Quantum Research International Full time

    Overview:Quantum Research International, Inc. (Quantum) provides our national defense and federal civilian and industry customers with services and products in the following main areas: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air and Missile Defense, and Fires Support Systems; 5)...

  • Security Control Assessor

    1 month ago

    St Louis, Missouri, United States Amyx Full time

    Job Title: Security Control AssessorAt Amyx, we are seeking a highly skilled Security Control Assessor to join our Cybersecurity Division in the NCW St. Louis, MO area. As a key member of our team, you will be responsible for conducting comprehensive assessments of security controls and control enhancements to determine their...

  • Security Control Assessor I

    1 month ago

    St Louis, United States Amyx Full time

    Overview: Amyx is seeking to hire a Security Control Assessor-Intermediate to support our Cybersecurity Division/NGA Defender in the NCW St Louis, MO area. Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT)...

  • Secure Software Assessor

    4 weeks ago

    St Louis, Missouri, United States Quantum Research International Inc Full time

    Job DescriptionOverview:Quantum Research International, Inc. (Quantum) is a certified DoD Contractor providing services and products to US/Allied governments and industry in various areas, including Cybersecurity, High Performance Computing Systems, Cloud Services, and more. Our Corporate Office is in Huntsville, AL, but we actively hire for positions...

  • Cybersecurity Specialist

    4 weeks ago

    St Louis, Missouri, United States Quantum Research International Full time

    Job Title: Security Control Assessor - IntermediateQuantum Research International, Inc. (Quantum) is a leading provider of cybersecurity and information operations services to the U.S. Government and industry customers. We are seeking a highly skilled Security Control Assessor - Intermediate to join our team.Job Summary:The Security Control Assessor -...

  • Security Control Assessor

    1 month ago

    St Louis, United States Amyx Full time

    Overview: Amyx is seeking to hire a Security Control Assessor-Advanced to support our Cybersecurity Division/NGA Defender in the NCW St. Louis, MO area. Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system...

  • Security Control Assessor

    1 month ago

    St Louis, United States Amyx Full time

    Overview: Amyx is seeking to hire a Security Control Assessor-Advanced to support our Cybersecurity Division/NGA Defender in the NCW St. Louis, MO area. Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system...

  • Cybersecurity Specialist

    3 weeks ago

    St Louis, Missouri, United States Amyx Full time

    Job Title: Security Control AssessorAmyx is seeking a highly skilled Security Control Assessor to join our Cybersecurity Division in the NCW St. Louis, MO area. As a Security Control Assessor, you will be responsible for conducting independent comprehensive assessments of the management, operational, and technical security controls employed within or...

  • Security Analyst

    2 weeks ago

    st. louis, United States PTR Global Full time

    Security analysts are responsible for analyzing system and application security and making recommendations that optimize the protection of our computer systems and information resources. Security analysts develop, test, implement and maintain security policies and programs. They are responsible for staying current on security best practices and identifying...

  • Security Analyst

    1 week ago

    st. louis, United States PTR Global Full time

    Security analysts are responsible for analyzing system and application security and making recommendations that optimize the protection of our computer systems and information resources. Security analysts develop, test, implement and maintain security policies and programs. They are responsible for staying current on security best practices and identifying...

  • Security Analyst

    2 weeks ago

    St Louis, United States PTR Global Full time

    Security analysts are responsible for analyzing system and application security and making recommendations that optimize the protection of our computer systems and information resources. Security analysts develop, test, implement and maintain security policies and programs. They are responsible for staying current on security best practices and identifying...

  • Security Control Specialist

    3 weeks ago

    St Louis, Missouri, United States Amyx Full time

    Job Summary:Amyx is seeking a highly skilled Security Control Specialist to support our Cybersecurity Division in the NCW St. Louis, MO area. The ideal candidate will have a strong background in cybersecurity and experience with security control assessments.Key Responsibilities:Conduct independent comprehensive assessments of security controls and control...

  • Security Receptionist

    5 months ago

    St Louis, United States Inter-Con Security Full time

    Job DetailsLevel Experienced Job Location St. Louis (13815) - St. Louis, MO Position Type Part Time Salary Range $24.00 - $24.35 Hourly Job Shift Day DescriptionSecurity Receptionist (Part-Time) - 20 hours per weekPosition Summary: The Security Receptionist will provide administrative, operational, and security support. This position is managed by Inter-Con...

  • Security Systems Specialist

    3 weeks ago

    St Louis, Missouri, United States Burnes Citadel Security Full time

    Job SummaryAs a Security Technician with Burnes Citadel Security, you will be responsible for installing and servicing intrusion, fire, life safety, access control, video surveillance, and interactive/smart systems. Our company has been a trusted provider of security and life safety systems to the residential and business communities of St. Louis and...

  • Security Officer

    4 weeks ago

    St Louis, Missouri, United States 1st Class Security Full time

    Immediate Opening for a Full Time Loss Prevention Officer1st Class Security is seeking a highly motivated and detail-oriented Loss Prevention Officer to join our team. As a Loss Prevention Officer, you will play a critical role in identifying and preventing shoplifting, as well as interacting with local law enforcement agencies as needed.Key...

  • Senior Security Architect

    3 weeks ago

    St Louis, Missouri, United States Centene Full time

    Job Summary:We are seeking a highly skilled Senior Security Architect to join our team at Centene. As a Senior Security Architect, you will be responsible for advising policy, direction, and vision for critical enterprise IT & Business domains. You will drive and design new and critical security initiatives for emerging technologies, assess, envision, plan,...

  • Security Technician

    3 weeks ago

    St Louis, Missouri, United States Burnes-Citadel Security Company Full time

    Job OverviewBurnes Citadel Security Company, a trusted provider of security and life safety systems, is seeking a skilled Security Technician to join our team. As a Security Technician, you will be responsible for installing and servicing intrusion, fire, life safety, access control, video surveillance, and interactive/smart systems.Key...

  • Security Analyst

    1 week ago

    ST Louis, MO, United States PTR Global Full time

    Security analysts are responsible for analyzing system and application security and making recommendations that optimize the protection of our computer systems and information resources. Security analysts develop, test, implement and maintain security policies and programs. They are responsible for staying current on security best practices and identifying...