What are the responsibilities and job description for the Security Control Assessor (SCA) (Need Top secret clearance) position at Delviom LLC?
Senior Security Control Assessors to lead complex cybersecurity assessment and authorization activities involving classified DHS Intelligence Enterprise systems, Cross Domain Solutions (CDS), Special Access Program (SAP) systems, C-LAN extension sites, and cloud environments.
The role requires advanced RMF expertise, independent assessment leadership, risk evaluation, security authorization knowledge, and the ability to mentor junior assessment personnel.
Key Responsibilities
- Lead complex security control assessments involving classified, sensitive, and mission-critical information systems.
- Evaluate security controls employed directly by systems and inherited from enterprise common control providers.
- Perform security assessments according to established Security Assessment Plans and applicable federal and IC requirements.
- Assess Cross Domain Solutions, Special Access Program systems, cloud-hosted environments, and C-LAN extension sites.
- Analyze implementation and effectiveness of security controls against NIST RMF, ICD 503, and CNSSI 1253.
- Conduct vulnerability and configuration security assessments using enterprise security assessment tools.
- Identify control deficiencies and provide technical recommendations for correcting vulnerabilities and compliance gaps.
- Evaluate security risks and provide assessment findings supporting authorization decisions.
- Develop and improve assessment methodologies, SOPs, and authorization processes.
- Support improvements toward ongoing authorization and security assessment reciprocity.
- Provide technical oversight and mentoring to junior security assessors.
Mandatory Skills
- Advanced NIST Risk Management Framework
- ICD 503 and CNSSI 1253
- Security Control Assessments and A&A
- Cross Domain Solutions and/or SAP system assessment requirements
- Cloud security authorization principles
- SSP, SAP, SAR, and POA&M evaluation
- Security assessment methodologies and risk analysis
- Hands-on experience with at least two tools such as NessACAS, SCAP, WebInspect, SonarQube, or STIG Viewer
- Assessment procedure development and technical leadership
- Experience leading complex assessments independently