Current jobs related to Security Control Assessor - Washington - Booz Allen Hamilton

  • Security Control Assessor

    1 week ago

    Washington, United States Cedelis Full time

    Job DescriptionJob DescriptionLocation & Commitments: Reston, Tysons, Washington DCRequired Qualifications:- Clearance & Certifications: Must currently possess an active TS/SCI with the ability to obtain and maintain a CI polygraph and possess current DOD 8570 IAT III certification- Education: Bachelor's Degree in Computer Science or a related technical...

  • Security Control Assessor

    7 days ago

    Washington, United States Allen Integrated Solutions Full time

    Job DescriptionJob DescriptionSecurity Control Assessor (SCA), Level 3TS/SCI/POLY RequiredSecurity Control Assessor (SCA) QualificationsA Security Control Assessor (SCA) is a security professional that provides information security Assessment and Authorization (A&A) support throughout a program's lifecycle to Contractor and Government facilities...

  • Security Control Assessor II

    6 days ago

    Washington, United States P-11 Security Inc Full time

    Job DescriptionJob DescriptionDescription:P-11 Security is seeking a SCA who is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly,...

  • SCA II

    2 days ago

    Washington, United States Watermark Risk Management International Full time

    Job DescriptionJob DescriptionCome make your mark with Watermark!🎖️ FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business.🌎 SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs and mission requirements.⭐ OUR CORE VALUES drive every...

  • Security Controls Specialist

    2 weeks ago

    Washington, Washington, D.C., United States The Swift Group Full time

    Job Title: Security Controls SpecialistJob Summary:The Swift Group is seeking a highly skilled Security Controls Specialist to join our team. As a Security Controls Specialist, you will be responsible for conducting verification and validation of security compliance for all information systems, products, and components.Key Responsibilities:Conduct...

  • Security Control Assessor Support Expert

    2 weeks ago

    Washington, Washington, D.C., United States Avint Full time

    About the Opportunity:Join Avint as an Information Assurance Security Manager and contribute to our team's success in Washington, DC and Tysons Corner, VA. As an expert in security control assessment, you will ensure the effectiveness of IT system controls and guide our team towards compliance with NIST SP 800-37 guidelines.Key Responsibilities:Design and...

  • Assessor Staff

    1 week ago

    Washington, United States Ampcus Full time

    Location: Washington, DC (2 days a week onsite) Description: Assessor Staff must hold in good standing at least one (1) of the following IT Professional Certifications (or equivalent): o GIAC Systems and Network Auditor ("GSNA") o ISC2 Certified Authorization Professional ("CAP") o ISC2 Certified Information System Security Professional ("CISSP") o ISACA...

  • Vulnerability Assessor

    2 days ago

    Washington, Washington, D.C., United States Tetra Tech Full time

    Job Description: In this Vulnerability Assessor role, you will be responsible for identifying and mitigating security risks in computer systems and networks. You will perform penetration testing, software assurance, and vulnerability assessment in support of DHS customers. Key Responsibilities: • Perform penetration testing to identify vulnerabilities in...

  • Information Security Specialist

    3 weeks ago

    Washington, Washington, D.C., United States Avint Full time

    Job OverviewAvint LLC is seeking a highly skilled Information Security Specialist to join our team in Washington, DC and Tysons Corner, VA. As a Security Control Assessor Support Expert, you will conduct comprehensive assessments of security controls and provide strategic materials for executive management and other stakeholders.Salary: $110,000 - $125,000...

  • Security Control Assessor

    6 days ago

    Washington, United States Targeted Solutions, LLC Full time

    Job DescriptionJob DescriptionSalary: Up to $76.63 HourlySecurity Control Assessor (SCA) II The SCA is responsible for conducting a comprehensive assessment of the management, operational, and technicalsecurity controls employed within or inherited by an IS to determine the overall effectiveness of thecontrols (i.e., the extent to which the controls are...

  • Cybersecurity Assessor

    2 days ago

    Washington, United States Ampcus inc Full time

    Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.Job Title: Cybersecurity AssessorLocation(s): Washington, DCJob Description: Plan and Execute Simulated Attacks: Design, plan, and conduct red team exercises, including but not...

  • Physical Security Specialist

    13 hours ago

    Washington, United States Control Risks Full time

    Job DescriptionWe are looking for a highly experienced Senior Security Manager to join our team at Control Risks. As a Senior Security Manager, you will be responsible for developing and implementing a comprehensive security plan for an onsite construction project in the Washington, D.C. area. This includes conducting a security audit to identify areas for...

  • Facility Condition Assessor

    1 week ago

    Washington, United States JGMS Government Services, LLC Full time

    Job DescriptionJob DescriptionFacility Condition Assessor - Washington D.C. area.Please continue to the JGMS Career page to apply for this position: https://tinyurl.com/FCADCScope: We are searching for an experienced Facility Condition Assessor to join our team! As a Facilities Assessor you will perform inspections on large, complex, and diverse...

  • Enterprise Security Compliance Specialist

    2 weeks ago

    Washington, Washington, D.C., United States The Swift Group Full time

    We are seeking an experienced professional to conduct verification and validation for security compliance of all information systems, products, and components.Key ResponsibilitiesConduct on-site evaluations and validate security requirementsIdentify and provide recommendations for non-compliance issues and potential mitigationsCoordinate penetration testing...

  • Security Design Strategist

    3 weeks ago

    Washington, Washington, D.C., United States Control Risks Full time

    Job OverviewWe are seeking a skilled Protective Design Specialist to join our team at Control Risks. This exciting role offers the opportunity to shape the future of security for high-profile individuals and organizations.In this dynamic position, you will combine your security expertise with cutting-edge design principles to create robust protective...

  • Senior Security Manager

    1 day ago

    Washington, United States Control Risks Full time

    Washington, District of Columbia, United StatesControl Risks is the specialist global risk consultancy that helps organisations succeed in a volatile world. Control Risks is hiring a Senior Security Manager to support a major Energy client for a 6-month contract. This role will act as the client’s Security Manager for an onsite construction project in DC,...

  • Associate Consultant, Crisis

    7 days ago

    Washington, United States Control Risks Full time

    Associate Consultant, Crisis & Security ConsultingWashington, District of Columbia, United StatesCompany: Control RisksControl Risks is the specialist global risk consultancy that helps organisations succeed in a volatile world.This role may be based in Washington DC, NYC, or Houston.We seek a highly motivated, detail-oriented, business-minded professional...

  • Security Controls Architect

    2 weeks ago

    Washington, United States Bank of America Full time

    About the RoleAs a Security Controls Architect at Bank of America, you will play a critical role in protecting our organization's data and systems from cyber threats. You will be responsible for evaluating and recommending new cloud security technologies and practices, developing and implementing security controls for cloud infrastructure (IaaS, PaaS, SaaS)...

  • Clinical Assessor

    6 months ago

    Washington, United States Acentra Health Full time

    CNSI and Kepro are now Acentra Health! Acentra Health exists to empower better health outcomes through technology, services, and clinical expertise. Our mission is to innovate health solutions that deliver maximum value and impact. Lead the Way is our rallying cry at Acentra Health. Think of it as an open invitation to embrace the company's mission, actively...

  • Cyber Security Solutions Architect

    3 weeks ago

    Washington, United States SAIC Full time

    Job OverviewWe are seeking a highly skilled Cyber Security Solutions Architect to join our team at SAIC in Washington, DC. This is a hybrid remote position that requires regular SIPR network connectivity.About the RoleThis role will support the Secret and Below Releasable Environment (SABRE) program in the Air Force Cloud One Common Computing Environment...

Security Control Assessor

1 month ago

Washington, United States Booz Allen Hamilton Full time
Job Number: R0210761

Security Control Assessor, Mid

Key Role:

Conduct independent security control testing and assessments of the management, operational, and technical security controls to determine the overall effectiveness of security controls, based on the NIST Risk Management Framework (RMF). Technically assess both major application and general support system security configurations and implementation using manual and automated test methods. Provide an assessment of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions to address identified vulnerabilities. Develop and review SCA artifacts such as Security Assessment Plan (SAP), Security Assessment Reports (SAR) and System Security Plan (SSP).

Basic Qualifications:

  • 3+ years of experience conducting NIST security control assessments on federal applications and general support systems (GSSs) to ensure compliance with the NIST SP 800-53 Rev. 4 and Rev. 5, NIST 800-37 Rev. 1 and Rev. 2, and agency-specific requirements

  • Experience assessing Web Application securely via security controls assessment and vulnerability and compliance scanning analysis

  • Experience assessing the security of cloud environments and cloud-hosted applications based on FedRAMP controls

  • Knowledge of cybersecurity principles used to manage risks for the use, processing, storage, and transmission of information or data

  • Knowledge of information technology (IT) security principles and methods such as firewalls, demilitarized zones, or encryption

  • Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements

  • HS diploma or GED

  • Security+ Certification

Additional Qualifications:

  • Experience with cyber governance, risk, and compliance (GRC) tools, and RMF steps 4-6 for federal applications and GSSs

  • Experience with Xacta a plus

  • Experience working with Plans of Action and Milestones(POA&Ms), including providing detailed vulnerability summaries and impacts and drafting risk mitigation strategies for identified risk

  • Experience conducting vulnerability assessments and analysis of vulnerability scan results with Nessus or related vulnerability scanning tools

  • Knowledge of network security architecture concepts including topology, protocols, components, and principles such as application of defense-in-depth

  • Knowledge of security principles for Industrial Control Systems (ICS)

  • Knowledge of security principles for IT infrastructure systems such as PKI, network appliances, intrusion detection and prevention systems, and firewalls

  • Possession of excellent verbal and written communication skills

  • Bachelor‘s degree in Computer Science, Information Technology, or Engineering preferred

  • CISSP, CISA, CAP, or GSNA certification preferred

Vetting:

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen‘s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual‘s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $60,400.00 to $137,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen‘s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

  • If this position is listed as remote or hybrid, you‘ll periodically work from a Booz Allen or client site facility.
  • If this position is listed as onsite, you‘ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We‘re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change - no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.