Junior Security Control Assessor (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Junior Security Control Assessor (Cybersecurity): Conducting cybersecurity assessments and audits for DoD organizations with an accent on RMF compliance, vulnerability testing, and security control validation. Focus on documenting findings in eMASS, analyzing security gaps, and ensuring adherence to DoD policies through extensive domestic and international travel.
Location: Must be based in or able to travel from Ft. Meade, MD. This is a hybrid role requiring up to 75% travel (CONUS and OCONUS).
Salary: $50,000 - $60,000
Company
is a professional services firm providing information security compliance, governance, and consulting to public sector clients.
What you will do
- Conduct cybersecurity assessments, audits, and inspections for DoD organizations.
- Evaluate systems and Defensive Cyberspace Operations using threat emulation and performance testing.
- Document findings and compliance status in eMASS and STIG Viewer.
- Analyze security gaps and provide mitigation recommendations to stakeholders.
- Coordinate logistics, test plans, and scope with the SCA Team Lead.
- Participate in assessment reviews, in-briefs, and out-briefs.
Requirements
- Active Secret Clearance required (Top Secret/SCI preferred).
- Bachelor's degree in Security, Information Technology, or related field.
- DoD 8570 IAT II certification (active or obtained within 90 days).
- 0-1 year of experience; willingness to undergo training on technologies and RMF.
- Strong written and verbal communication skills for reporting.
- Ability to travel up to 75% of the time for government assessments.
Nice to have
- Familiarity with STIGs, SRGs, and POA&Ms.
- Understanding of NIST SP 800-37, NIST SP 800-53, and CNSSI 1253.
- Experience with tools such as Nessus, ACAS, SCAP, or HBSS.
Culture & Benefits
- Medical coverage with three plan options, dental, and vision.
- Retirement savings accounts (Pre-Tax and Roth).
- Tuition and training reimbursement programs.
- Paid parental leave, personal time off, and paid holidays.
- Life insurance and long/short-term disability coverage.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →