Security Control Assessor (SCA)

Title:

Location:

Responsibilities include, but are not limited to:

• Three (3) years of cybersecurity experience with at least one year of experience conducting SCAs under ICD 503/CNSSI 1253 NIST Cybersecurity Framework, Risk Management Framework (RMF), or a similar framework.
• One full year of SCA experiences within the last three calendar years.
• One full year supporting cloud environment and experience performing security assessments in a cloud environment (AWS, Google, IBM, Azure, and Oracle).
• Skill in conducting vulnerability scans and recognizing vulnerability in security systems (e.g., Cloud Environments) AWS, Google, IBM, Azure, and Oracle.
• Must meet Department of Defense (DOD) 8570.01-Manual (M) Information Assurances Workforce Improvement Program requirement for Information Assurance Manger (IAM) Level III (CISM, CISSP or Associate GSLC or CCISO).
• Knowledge of general attack strategies (e.g., MITRE ATT&CK Framework).
• Knowledge of NISPOM, ICD 503, NIST SP 800-53, ICD 705, and other ICDs as appropriate.
• Knowledge of Independent Verification & Validation (IV&V) of security controls.

Required Qualifications

• Bachelor's Degree (Computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline)
• 6+ years or relevant experience
• Four years of additional demonstrated work experience in Security Control Assessor (SCA) and Defensive Cyber Operations (DCO)Testing will be accepted in lieu of a bachelor’s degree.
• A Master’s degree in an applicable discipline be substituted for three years of demonstrated work experience.
• Technical skills
• Current TS/SCI clearance with Polygraph required.