Security Control Assessor
Seize your opportunity to make a personal impact as a Security Control Assessor supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. At GDIT, people are our differentiator. As aSecurity Control Assessor, you will help ensure today is safe and tomorrow is smarter.
HOW A SECURITY CONTROL ASSESSOR WILL MAKE AN IMPACT
- Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems working either alone or as part of a team.
- Ensures integrity of IT systems by identifying and mitigating potential avenues of exploitation including system level attacks and user level attacks.
- Applies experience with RMF, CNSSI 1253, NIST SP 800-53 Rev 5, and NISPOM
- Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)
- Demonstrated experience conducting hands on security testing, analyzing results, documenting risks, and recommending countermeasures
- Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations and instructions
- Develops and documents security evaluation test plans and procedures
- Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation
WHAT YOU'LL NEED TO SUCCEED:
- Education: Bachelor's Degree (Computer Science or Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline)
- Required Experience: 10+ yrs (Must have 4+ yrs of hands-on SCA experience)
- Clearance: TS/SCI with Polygraph
- Required Technical Skills:
- Compliance and vulnerability scanning tools (XACTA, RedSeal, Tenable, Nessus, Splunk, and/or other vulnerability scanners)
- Strong understanding of the Assessment and Authorization (A&A) process including Cloud Best Practices
- Excellent oral and technical writing skills
- Strongly Desired Certifications: CASP, CISA, CISSP, AWS Cloud Practitioner, AWS Solutions Architect Associate, Microsoft AZ 900, Microsoft AZ-500
- Security Clearance Level: TS/SCI with active polygraph
- Location: McLean, VA - On Customer Site
GDIT IS YOUR PLACE:
- 401K with company match
- Comprehensive health and wellness packages
- Internal mobility team dedicated to helping you own your career
- Professional growth opportunities including paid education and certifications
- Cutting-edge technology you can learn from
- Rest and recharge with paid vacation and holidays