Security Control Assessor

• Analyze design specifications, design documentation, configuration practices and procedures, and operational practices and procedures • Conduct on-site evaluations • Conducts verification and validation for security compliance of low and moderately complex information systems, products, and components • Provide identification of non-compliance of security requirements and possible mitigations to requirements that are not in compliance • Validate the security requirements of the information system • Verify and validate the system meets the security requirements • Provide vulnerability assessment of the system, coordinate penetration testing, and provide a comprehensive verification and validation report (certification report) for the information system

Qualifications

Qualifications: Five (5) years experience in security, systems engineering or system assessment to include recent experience within the last three (3) years in the following areas: Cybersecurity principles and technology, including access/control, authorization, identification and authentication, PKI, network and enterprise security architecture is required. Bachelor's degree in Computer Science or Information Technology Engineering or related field of study is required. In lieu of a Bachelor's degree, four (4) additional years in security or systems engineering may be substituted. DoD 8570 compliance with IAT II is required.