Security Control Assessor

Found in: Dice One Red US C2 - 1 week ago

Fort Meade, United States Athena Technology Group Full time
Security Control Assessor - Senior Description/Job Summary Security Control Assessor - Senior Job Location: Fort Meade, MD Position Type: Full Time, 40 hours per week Athena Technology Group, Inc. is a Service-Disabled Veteran Owned /Small Business (SDVOSB) focused on Information Technology and Communications consulting, system engineering, integration, deployment and operations of stat of the art command and control and information systems that deliver critical network centric solutions to the warfighter. With a proven track record of technical support to our customers, we are looking for innovative industry professionals to join our team. Please contact . JOB DESCRIPTIONS: Perform Security Control Assessments to determine the extent to which Information System security controls are implemented correctly, operating as intended, and producing the desired outcomes as stated in the DISA Information Assurance Requirements. Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls. Follow Assessment and Authorization procedures as defined in NIST 800-37 to complete comprehensive security control assessment and draft formal Security Assessment Reports (SAR) to document finding. Tasks: * Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.
* Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.
* Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
* Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).
* Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
* Verify and update security documentation reflecting the application/system security design features.
* Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
* Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
* Assess the effectiveness of security controls and assess all the configuration management (change configuration/release management) processes.
Desired skills: * Experience with RMF, CNSSI 1253, NIST SP 800-53, ICD 503
* Experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)
* Experience with utilizing Telos XACTA tool
* Applies knowledge of Information Assurance Vulnerability Alerts (IAVAs)
* Applies experience with compliance and vulnerability scanning tools (Nessus, McAfee ePO)
* Conducts comprehensive security control assessments levied against a system and documenting the results, including recommendations for correcting any weaknesses or deficiencies in the controls
* Develops a Security Assessment Report (SAR)
* Conducts comprehensive reviews of security authorization documents to ensure the appropriate NIST security guidelines were used during the assessments and the selections of security controls are relevant to the confidentiality, integrity, and availability of the system
* Performs security control assessments on cloud-based systems
Required Experience: * 10+ years of relevant experience as a cyber security control assessor or a MS with 5 years
* Certification Requirements: IAM Level II, CAP or CCSP preferred
* Education Requirement: B.S. or relevant experience in related field
* Clearance Requirements: Active TS/SCI
US Citizenship and an active DOD TOP SECRECT/SCI Clearance are required for the position. Salary will be commensurate with experience. ATG is a growing company and there will be opportunities for internal advancement. ATG is an Equal Opportunity Employer.

  • Security Control Assessor

    Found in: Dice One Red US C2 - 1 week ago

    Fort Meade, United States Athena Technology Group Full time

    ARCYBER-03 - Security Control Assessor - Senior Requisition: 2024-01-014 Description/Job Summary Security Control Assessor - Senior Job Location: Fort Meade, MD Position Type: Full Time, 40 hours per week Athena Technology Group, Inc. is a Service-Disabled Veteran Owned /Small Business (SDVOSB) focused on Information Technology and Communications consulting,...

  • Security Control Assessor

    6 days ago

    Fort Meade, United States Athena Technology Group, Inc. Full time

    Job DescriptionJob DescriptionDescription/Job SummarySecurity Control Assessor - SeniorJob Location: Fort Meade, MD Position Type: Full Time, 40 hours per week Athena Technology Group, Inc. is a Service-Disabled Veteran Owned /Small Business (SDVOSB) focused on Information Technology and Communications consulting, system engineering, integration, deployment...

  • Security Control Assessor

    1 week ago

    Fort Meade, United States Athena Technology Group, Inc. Full time

    Job DescriptionJob DescriptionDescription/Job SummarySecurity Control Assessor - SeniorJob Location: Fort Meade, MD Position Type: Full Time, 40 hours per week Athena Technology Group, Inc. is a Service-Disabled Veteran Owned /Small Business (SDVOSB) focused on Information Technology and Communications consulting, system engineering, integration, deployment...

  • Security Control Assessor Level 2

    1 week ago

    Fort Meade, United States Birchmere Group Full time

    Job DescriptionJob DescriptionSalary: Depends on Experience***You MUST already have a TS/SCI Clearance with a Polygraph to qualify***Security Control Assessor Level 2Conduct verification and validation for security compliance of low and moderately complex information systems, products, and components. Analyze design specifications, design documentation,...

  • Security Control Assessor Level 3

    1 week ago

    Fort Meade, United States Birchmere Group Full time

    Job DescriptionJob DescriptionSalary: Depends on Experience***You MUST already have a TS/SCI Clearance with a Polygraph to qualify***Security Control Assessor Level 3Conduct verification and validation for security compliance of low and moderately complex information systems, products, and components. Analyze design specifications, design documentation,...

  • Security Control Assessor

    Found in: Careerbuilder One Red US C2 - 6 days ago

    Fort Meade, MD, United States Athena Technology Group Full time

    ARCYBER-03 - Security Control Assessor - Senior Requisition: 2024-01-014 Description/Job Summary Security Control Assessor - Senior Job Location: Fort Meade, MD Position Type: Full Time, 40 hours per week Athena Technology Group, Incis a Service-Disabled Veteran Owned /Small Business (SDVOSB) focused on Information Technology and Communications consulting,...

  • Functional Analyst Level 2

    1 week ago

    Fort Meade, United States CareerBuilder Full time

    **This position is contingent on contract award** Description: Identify overall security requirements for the protection of data to ensure the implementation of appropriate information security controls.Provide analysis of customer mission needs to determine functional testing requirements. Work with security control assessors on systems testing. Perform...

  • Industrial Control System Specialist

    Found in: beBee jobs US - 1 week ago

    Meade, United States National Security Agency (NSA) Full time

    ResponsibilitiesThe National Security Agency (NSA) currently has opportunities for highly motivated Industrial Control System (ICS) Specialists/Engineers to provide expertise in the design, construction, commissioning, and operation of new and renovated electrical and mechanical infrastructure. This position has two areas of focus, one within Design and...

  • Delegated Authorizing Official Representative Level 2

    1 week ago

    Fort Meade, United States Birchmere Group Full time

    Job DescriptionJob DescriptionSalary: Depends on Experience***You MUST already have a TS/SCI Clearance with a Polygraph to qualify***Delegated Authorizing Official Representative Level 2Responsible for assisting in identifying the overall security requirements for the protection of data, to ensure the implementation of appropriate information security...

  • Delegated Authorizing Official Representative Level 3

    3 weeks ago

    Fort Meade, United States Birchmere Group Full time

    Job DescriptionJob DescriptionSalary: Depends on Experience***You MUST already have a TS/SCI Clearance with a Polygraph to qualify***Delegated Authorizing Official Representative Level 3Responsible for assisting in identifying the overall security requirements for the protection of data, to ensure the implementation of appropriate information security...

  • Lead Security Engineer with Security Clearance

    Found in: Dice One Red US C2 - 1 week ago

    Fort Belvoir, United States Agensys Corporation Full time

    RESPONSIBILITIES Act as an independent and impartial assessor to determine and certify aggregate cybersecurity risk for recommendation to the SCA.Experience in helping federal agencies manage risks associated with operating an on-premise and cloud-based information system while using RMFConduct security control validation and assessment of technical security...

  • Configuration Manager/Controller

    Found in: beBee jobs US - 3 weeks ago

    Meade, United States National Security Agency (NSA) Full time

    ResponsibilitiesDo you want to be at the forefront of strengthening our National Cybersecurity posture; do you want to do work you can't do anywhere else? Do you want to help chart the course for NSA's innovative Cybersecurity and help prevent future cyber-attacks against the United States? If so, NSA is the place for you Configuration Managers/Configuration...

  • Information Systems Security Professional

    Found in: beBee jobs US - 3 weeks ago

    Meade, United States National Security Agency (NSA) Full time

    ResponsibilitiesInformation System Security Professionals at NSA play a vital role in Security Architecture and Engineering, Communication and Network Security, Software Development Security, Security Operations, Identity and Access Management, Asset Security, and Security and Risk Management:Defining information system security requirements and...

  • Crestron Control System Programmer with Security Clearance

    Found in: Dice One Red US C2 - 2 weeks ago

    Fort Meade, United States By Light Professional IT Services Full time

    Overview The Crestron Control System Programmer will provide daily operational support to the Defense Information Systems Agency (DISA) Headquarters at Ft. Meade, Maryland, with a primary focus on Crestron programming and system integration. Responsibilities * Develop, program, and troubleshoot complex Crestron control systems for audio, video, switching,...

  • Lead Security Engineer with Security Clearance

    Found in: Careerbuilder One Red US C2 - 2 weeks ago

    Fort Belvoir, VA, United States Agensys Corporation Full time

    RESPONSIBILITIES Act as an independent and impartial assessor to determine and certify aggregate cybersecurity risk for recommendation to the SCA.Experience in helping federal agencies manage risks associated with operating an on-premise and cloud-based information system while using RMFConduct security control validation and assessment of technical security...

  • Security Manager

    1 week ago

    Fort Meade, United States CareerBuilder Full time

    The Security Manager provides full time, on site security management to ensure compliance with Government security requirements on a secured construction site. The Security Manager will be the primary representative/liaison with the Government security team. Specific duties include: Security Management Develop and enforce security plans and procedures for...

  • Security Manager

    4 days ago

    Fort Meade, United States Clark Construction Group Full time

    The Security Manager provides full time, on site security management to ensure compliance with Government security requirements on a secured construction site. The Security Manager will be the primary representative/liaison with the Government security team. Specific duties include: Security Management Develop and enforce security plans and procedures for...

  • Cybersecurity Engineer II

    1 week ago

    Fort Meade, United States TechGuard Security Full time

    Job DescriptionJob DescriptionJob Description:Ensures the rigorous application of cybersecurity policies, principles, and practices in the delivery of all Information Technology (IT) and cybersecurity servicesDevelops and designs security solutions to maintain confidentiality, integrity, and availability of information throughout the enterpriseIdentifies,...

  • Cybersecurity Engineer II

    2 days ago

    Fort Meade, United States TechGuard Security Full time

    Job DescriptionJob DescriptionJob Description:Ensures the rigorous application of cybersecurity policies, principles, and practices in the delivery of all Information Technology (IT) and cybersecurity servicesDevelops and designs security solutions to maintain confidentiality, integrity, and availability of information throughout the enterpriseIdentifies,...

  • Senior Security Engineer

    1 week ago

    Fort Meade, United States CyberSearch Full time

    OT Security Consultant (1) -MUST HAVE TS/SCI + lifestyle Poly (ACTIVE) 12-month Contract Ft. Meade, MD 100% onsite Rate is open based on skills & experience **** Must be US CITIZEN *** *** Must have "Active" TS/SCI + CI Poly Overview: Consultant will be responsible for working with clients to assess their OT security posture. The Security Consultant...