Назад
Company hidden
3 дня назад

Security Control Assessor, Jr (Cybersecurity)

60 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
junior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Control Assessor, Jr (Cybersecurity): Conducting cybersecurity assessments, audits, vulnerability assessments, and control validation for DoD systems and organizations with an accent on RMF compliance, STIGs, NIST frameworks, and security documentation. Focus on analyzing security gaps, testing defensive operations, documenting findings in eMASS, and supporting authorization recommendations across CONUS and OCONUS environments.

Location: Remote role with approximately 75% travel CONUS and OCONUS; listed locations include Alexandria, Virginia; Chambersburg, Pennsylvania; and Fort Meade, Maryland, United States.

Salary: $60,000+ annually.

Company

hirify.global provides consulting, technology solutions, and professional services for U.S. government, defense, and intelligence organizations.

What you will do

  • Conduct cybersecurity assessments, audits, inspections, vulnerability assessments, and performance-based testing for DoD organizations and partners.
  • Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation.
  • Coordinate assessment logistics, test plans, scope, development, and execution with the SCA Team Lead.
  • Capture vulnerability results in STIG Viewer or designated tools and document findings in eMASS.
  • Analyze security gaps, recommend mitigations, and validate cybersecurity controls, TTPs, STIGs, RMF controls, and DoD policy compliance.
  • Present assessment findings during daily reviews, in-briefs, and out-briefs and provide results for authorization recommendations.

Requirements

  • Bachelor’s degree, preferably in an IT-related field.
  • DoD 8570 IA Technical IAT Level II certification.
  • Five years of overall cybersecurity experience, including one to three years in a C&A or A&A role.
  • U.S. citizenship is required.
  • Active DoD Top Secret clearance with SCI eligibility must be maintained.
  • Experience with STIGs, SRGs, POA&Ms, and cybersecurity best practices.
  • Strong understanding of the RMF process, NIST SP 800-37, NIST SP 800-53, and CNSSI 1253.
  • Experience with tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS.
  • Demonstrated understanding of three key technology areas, such as Network, Windows, UNIX, Oracle, SQL, Applications, Physical Security, RMF, Cloud Environments, Endpoint Security, or ACAS.
  • Strong written and verbal communication skills for reporting assessment findings.
  • Valid U.S. passport and driver’s license, or the ability to obtain them quickly.

Culture & Benefits

  • Remote work with approximately 75% CONUS and OCONUS travel.
  • 26 days of paid leave, including vacation, sick, personal time, and holidays.
  • Performance bonuses and a 401(k) match of 3% with immediate vesting.
  • Company-paid life insurance up to $300,000, medical, dental, vision, FSA, and HSA options.
  • 15 days of fully paid parental leave and military differential pay.
  • Paid training and certifications, tuition reimbursement, and professional development support.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →