Senior Security Controls Assessor

2 days ago

Arlington, United States Tyto Athene, LLC Full time
Job Description

Tyto Athene is searching for a Senior Security Controls Assessor to support our customer in Arlington, Virginia.

Responsibilities:

  • Support RMF steps 4 - assess, 5 - authorize, step 6 - monitor controls: conducting system security assessments, supporting the system security authorization to operate process, and conducting annual assessments, respectively
  • Produce quality security assessment deliverables, ensuring the content of each deliverable is specific to the subject systems, complete, and accurate
  • Develop and execute a security and privacy assessment plan for each security assessment project
  • Create and maintain test cases for security assessment testing
  • Perform security testing at the control-requirement level for each unique component of each system (e.g., application, web application server, financial systems, database server/instance, operating systems, specialized appliances, network and infrastructure devices, and end-user devices (e.g., mobile phones, laptops, etc.)
  • Conduct technical content review and analysis of technical reports from security vulnerability scan, penetration test, and configuration compliance scan tools with respect to the subject system's context and environment in order to analyze the findings accurately and completely
  • Analyze security tool reports and determine residual risk or false positives from technical reports and artifacts before assigning findings.
  • Document and provide findings and recommendations that are concise, system-specific, and actionable.
  • Perform and document client and system-specific risk analysis for each finding identified during each assessment in accordance with NIST SP 800-30, the client's risk appetite, and the client's security policies. The results of this risk analysis shall be documented in the Security Assessment Report (SAR) for each assessed FISMA system and a summary of the assessment results and risk shall be provided in the respective Assessment/Authorization Briefing.
Required:
  • Bachelor's Degree or 8 additional years of relevant equivalent experience
  • Minimum eight (8) years of general experience and six (6) years of relevant experience in functional responsibility
  • Thorough understanding and knowledge of FISMA and SA A process
  • Core competencies in Information Assurance, Information System/Network Security, IT Assessment, Risk Management, System Testing and Evaluation, and Vulnerability Assessment
  • Ability to provide an assessment of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation, and the ability to recommend corrective actions to address identified vulnerabilities
  • Knowledge of NIST SP 800-53 (Rev 4 Rev 5) and NIST 800-137
  • Proficiency in writing technical analysis reports
  • Strong written and oral communication skills
  • Certified Information Systems Security Professional (CISSP) (required)
Desired:
  • Certified Information Security Manager (CISM) (optional but highly recommended)
  • Certified Authorization Professional (CAP), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC)
  • Experience with IT ticketing systems (Jira, ServiceNow, Remedy, etc.) and eGRC tools (Archer, CSAM, eMASS, etc.)


Clearance: Secret Clearance required, Top Secret with SCI eligibility preferred

Certification Requirement: DoD 8570 IAM/IAT Level II certification. This will change to a DoD 8140 equivalent once a DISA 8140 policy is released.

Location: This is an on-site role with expectations of being on the client site in Arlington, VA five days a week.

Additional Information

After several strategic acquisitions in 2021, Tyto Athene has experienced enormous opportunity and growth. Aside from being the leading provider of mission-focused IT and Cyber services and solutions to critical U.S. government agencies, Tyto is well-positioned to meet the growing demand for network modernization requirements across the federal enterprise.

Our employees are the key to the innovation that has made Tyto a success. We provide an environment that is geared to reward potential, innovation, and teamwork. If you would like to unleash your creativity and your careerit's time to join Team Tyto

  • Security Assessor

    1 week ago

    Arlington, United States 38North Security Full time

    At 38North, we’re not just another federal contracting firm. We’re the disruptors, the innovators, and the bold thinkers who are breaking the mold. We’re on a mission to transform the way security assessments are done for federal IT environments—infusing every project with creativity, excellence, and a touch of rule-breaking spirit. If you want to...

  • Senior Security Controls Assessor

    4 days ago

    Arlington, United States Tyto Athene, LLC Full time

    Tyto Athene is searching for a Senior Security Controls Assessor to support our customer in Arlington, Virginia.Responsibilities:Support RMF steps 4 - assess, 5 - authorize, step 6 - monitor controls: conducting system security assessments, supporting the system security authorization to operate process, and conducting annual assessments, respectivelyProduce...

  • Senior Security Controls Assessor

    15 hours ago

    Arlington, United States Tyto Athene, LLC Full time

    Job Description Tyto Athene is searching for a Senior Security Controls Assessor to support our customer in Arlington, Virginia. Responsibilities:Support RMF steps 4 - assess, 5 - authorize, step 6 - monitor controls: conducting system security assessments, supporting the system security authorization to operate process, and conducting annual assessments,...

  • Security Control Assessor

    2 days ago

    Arlington, United States Saliense Full time

    Who is Saliense? Saliense is a growing Management and Technology Consulting Solutions provider based out of Mclean, VA. We work to solve our clients toughest challenges within the Defense, Civilian, Financial, and Healthcare industries. Our diverse employees support vital missions for government and commercial customers. For more information, visit...

  • Security Control Assessor

    2 weeks ago

    Arlington, United States Saliense Full time

    Who is Saliense?Saliense is a growing Management and Technology Consulting Solutions provider based out of Mclean, VA. We work to solve our client’s toughest challenges within the Defense, Civilian, Financial, and Healthcare industries. Our diverse employees support vital missions for government and commercial customers. For more information, visit...

  • Security Control Assessor

    2 weeks ago

    Arlington, United States Saliense Full time

    Who is Saliense?Saliense is a growing Management and Technology Consulting Solutions provider based out of Mclean, VA. We work to solve our client’s toughest challenges within the Defense, Civilian, Financial, and Healthcare industries. Our diverse employees support vital missions for government and commercial customers. For more information, visit...

  • Security Control Assessor

    2 days ago

    Arlington, United States SecuriGence LLC Full time

    Job Title: Security Control Assessor (SCA) Location: Arlington, Virginia Clearance Level: Top Secret Clearance Summary We deliver essential technology services to our customers in support of their missions to sustain the national security and economic interest of our nation. SecuriGence is seeking a talented Security Control Assessor to help contribute to...

  • Security Assessor

    1 month ago

    Arlington, Virginia, United States Zermount, Inc Full time

    Job DescriptionZermount, Inc. is seeking a highly skilled Security Assessor to play a critical role in evaluating and providing recommendations to enhance the security posture of the organization. The Security Assessor will identify and provide solutions to mitigate potential risks, ensuring compliance, and establishing a robust security framework to protect...

  • Security Control Assessor Team Lead

    2 days ago

    Arlington, United States The Newberry Group Inc Full time

    Who We Are... Today's leading government agencies are putting their trust in Newberry Group, and for good reason. Newberry brings strength to our clients, from the inside out through: •client intimacy and superior quality, •presence and accountability in our relationships, and •integrity and innovation at the forefront of everything we do. Newberry...

  • Security Control Assessor

    2 weeks ago

    Arlington, VA, United States Saliense Full time

    Who is Saliense?Saliense is a growing Management and Technology Consulting Solutions provider based out of Mclean, VA. We work to solve our client’s toughest challenges within the Defense, Civilian, Financial, and Healthcare industries. Our diverse employees support vital missions for government and commercial customers. For more information, visit...

  • Security Control Assessor Team Lead

    1 month ago

    Arlington, Virginia, United States Zermount, Inc Full time

    pbJobDescription/b/ppZermountInc.isseekingahighlyskilledSecurityControlAssessorTeamLeadtoleadmultipleteamsonlargeprojects.TheSystemSecurityAssessmentTeamLeadwilloverseeallaspectsoftheAssessmentTeam,ensuringtheperformanceofcomplexriskanalyses,includingriskassessments.TheSystemSecurityAssessmentTeamLeadwilldetermineinformationassurancebasedupontheanalysisoftec...

  • Security Assessor

    4 weeks ago

    Arlington, Virginia, United States Zermount, Inc Full time

    Job DescriptionZermount, Inc. is seeking a highly skilled Security Assessor to play a critical role in evaluating and providing recommendations to enhance the security posture of the organization. The ideal candidate will have a strong background in cybersecurity and risk management, with experience in conducting security assessments and providing solutions...

  • Business Development Lead, Security and Compliance, AWS Security Assurance Services

    1 month ago

    Arlington, Virginia, United States Amazon Full time

    About the RoleThe AWS Security Assurance Services team is seeking a talented Business Development Lead to connect with and educate internal and external customers on how our product-led, people-powered services help operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved.This is an exciting...

  • HVAC Truck Based Senior Controls Tech

    6 days ago

    Arlington Heights, United States Johnson Controls Full time

    HVAC Truck Based Senior Controls TechnicianWhat you will doPerform HVAC Control systems programming, troubleshooting, installation, commissioning and preventative maintenance as it is related to mechanical, electrical, and low voltage controls components.Respond to service and warranty calls using Johnson Controls configuration and commissioning tools as...

  • Information System Security Manager

    7 days ago

    arlington, United States Maximus Full time

    General information Job Posting Title Information System Security Manager (ISSM) Date Thursday, November 7, 2024 City Arlington State VA Country United States Working time Full-time Description & Requirements Maximus is looking for a Senior Information Systems Security Manager (ISSM) to join its team in Rosslyn,...

  • HVAC Truck Based Senior Controls Tech

    2 months ago

    Arlington Heights, United States Johnson Controls Full time

    HVAC Truck Based Senior Controls TechnicianWhat you will doPerform HVAC Control systems programming, troubleshooting, installation, commissioning and preventative maintenance as it is related to mechanical, electrical, and low voltage controls components.Respond to service and warranty calls using Johnson Controls configuration and commissioning tools as...

  • HVAC Truck Based Senior Controls Tech

    4 weeks ago

    Arlington Heights, United States Johnson Controls Full time

    HVAC Truck Based Senior Controls TechnicianWhat you will doPerform HVAC Control systems programming, troubleshooting, installation, commissioning and preventative maintenance as it is related to mechanical, electrical, and low voltage controls components.Respond to service and warranty calls using Johnson Controls configuration and commissioning tools as...

  • HVAC Truck Based Senior Controls Tech

    2 months ago

    Arlington Heights, United States Johnson Controls Full time

    HVAC Truck Based Senior Controls TechnicianWhat you will doPerform HVAC Control systems programming, troubleshooting, installation, commissioning and preventative maintenance as it is related to mechanical, electrical, and low voltage controls components.Respond to service and warranty calls using Johnson Controls configuration and commissioning tools as...

  • Security Staff

    2 months ago

    Arlington, United States Sunrise Senior Living Full time

    Sunrise Senior Living - JobID: 216514 [Security Guard] As a Security Staff at Sunrise, you'll: Promote and guard the community property; Assess against fire, theft, vandalism and illegal entry by unauthorized persons; Meet and/or exceed Sunrise service quality standards...Hiring Immediately >>

  • Senior Cyber Security Engineer

    7 days ago

    arlington, United States Maximus Full time

    General information Job Posting Title Senior Cyber Security Engineer Date Friday, November 1, 2024 City Arlington State VA Country United States Working time Full-time Description & Requirements Maximus is searching for a Senior Cyber Security Engineer to join a DoD program in Arlington, VA. This position is...