Security Controls Assesor

• Conducts verification and validation for security compliance of all information systems, products, and components • Analyzes design specifications, design documentation, configuration practices and procedures, and operational practices and procedures • Provides identification of non-compliance of security requirements and possible mitigations to requirements that are not in compliance • Conducts on-site evaluations • Validates the security requirements of the information system • Verifies and validates that the system meets the security requirements • Provides vulnerability assessment of the system • Coordinates penetration testing • Provides a comprehensive verification and validation report (certification report) for the information system • Provides process improvement recommendations • Assists the Government to draft standards and guidelines for usage

Qualifications

Education and Experience • 12 years of related work experience • A Bachelor's Degree in Computer Science or IT Engineering may be substituted for 4 years of experience • Experience in security or system engineering in five or more areas, including: telecommunications concepts, operating systems, databases/DBMS, middleware, applications, web-servers, SANS/Netaps, Active Directory, firewalls, and controlled interfaces This is a CWIP Billet per DoD Directive 8570-1 and must meet specified certification requirements defined and documented by the TTO COR - IAT III or IAM III.