Today
Top Secret/SCI
Mid Level Career (5+ yrs experience)
Unspecified
CI Polygraph
IT - Security
McLean, VA (On-Site/Office)
Security Control Accessor – Senior
Core Hours: 9 am – 3 pm
Clearance: CI or FSP
Job Description:
-Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
-Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems working either alone or as part of a team.
-Ensures integrity of IT systems by identifying and mitigating potential avenues of exploitation including system level attacks and user level attacks.
o Applies experience with RMF, CNSSI 1253, NIST SP 800-53, and NISPOM
o Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)
o Demonstrated experience conducting hands on security testing, analyzing results, documenting risks, and recommending countermeasures
o Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations and instructions
o Demonstrated experience providing threat analysis based on identified security vulnerabilities
o Develops and documents security evaluation test plans and procedures
o Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation
2+ years of technical related experience
Required Skills:
-Compliance and vulnerability scanning tools (XACTA, RedSeal, Nessus, Splunk, McAfee ePO, and/or other vulnerability scanners)
-Strong understanding of the Assessment and Authorization (A&A) process
-Excellent oral and technical writing skills
Desired Certifications: CASP, CCNP Security, CISA, CISSP, GCED, or GCIH
Core Hours: 9 am – 3 pm
Clearance: CI or FSP
Job Description:
-Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
-Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems working either alone or as part of a team.
-Ensures integrity of IT systems by identifying and mitigating potential avenues of exploitation including system level attacks and user level attacks.
o Applies experience with RMF, CNSSI 1253, NIST SP 800-53, and NISPOM
o Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)
o Demonstrated experience conducting hands on security testing, analyzing results, documenting risks, and recommending countermeasures
o Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations and instructions
o Demonstrated experience providing threat analysis based on identified security vulnerabilities
o Develops and documents security evaluation test plans and procedures
o Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation
2+ years of technical related experience
Required Skills:
-Compliance and vulnerability scanning tools (XACTA, RedSeal, Nessus, Splunk, McAfee ePO, and/or other vulnerability scanners)
-Strong understanding of the Assessment and Authorization (A&A) process
-Excellent oral and technical writing skills
Desired Certifications: CASP, CCNP Security, CISA, CISSP, GCED, or GCIH
group id: 10110693a
