Junior Security Control Assessor

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution to ensure security expertise is properly applied.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.

• The candidate will be required to review applicable controls to determine compliance status and enter all test results into the designated repository (Enterprise Mission Assurance Support Service (eMASS)

• Providing key assessment results to the team lead to include the number of controls reviewed and risk/residual information for inclusion in the authorization recommendation.   

• The candidate will be required to be certified via the ACP IAW the ACP CONOPS before conducting any assessments.   

• The candidate must be certified in a minimum of two (2) technologies and RMF Control Validation before conducting any assessments. Training through the DISA program will be provided after hire and consist of at least 3 months.  

• The contractor shall maintain active accounts to the tools and systems required to perform risk assessments.   

• The candidate will be required to participate in the in-brief and out-brief of each assessment.   

• Bachelor's degree in a related area of study (i.e. Security, Information Technology).
• 0-1 year of experience required. Willing to train on both technologies and RMF. 
• Active DoD Top Secret clearance with SCI eligibility is preferred but can begin with a secret clearance. 
• IAT Level II certification active or will obtain within 90 days of hire.
  • ​​CompTIA Cybersecurity Analyst (CySA )
  • CompTIA Security.
  • EC-Council Certified Network Defense (CND) v3.
  • Red Hat Certified System Administrator (RHCSA)
  • CCNA Security.
  • Global Industrial Cyber Security Professional (GICSP)
  • GIAC Security Essentials (GSEC)
  • Systems Security Certified Practitioner (SSCP)
• Familiarity with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices desired. 
• Understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253 desired
• Familiarity with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS desired
• Strong written and verbal communication skills for reporting assessment findings.

Salary : $50,000 - $60,000