Security Control Assesor

Systems & Network Security Engineer

Role Overview
This role focuses on assessing, strengthening, and maintaining the security posture of complex enterprise systems and networks. The engineer will evaluate existing technologies, identify risk areas, and design effective security strategies aligned with established risk management and compliance frameworks. The position blends hands‑on technical assessment with strategic advisory responsibilities, supporting both modernized and legacy environments.
The role has a direct impact on mission outcomes by supporting system authorization efforts, continuous monitoring, and infrastructure hardening. The environment emphasizes technical growth, mentoring, collaboration, and solving complex security challenges across multiple platforms.

Key Responsibilities

Evaluate systems, networks, and applications to identify security risks and recommend appropriate mitigation strategies
Perform system, application, and network vulnerability assessments aligned to recognized security control frameworks
Implement and validate technical security controls across infrastructure and platforms
Support authorization and ongoing compliance activities for both new and operational systems
Develop and maintain security documentation, including system security plans, risk artifacts, and remediation trackers
Conduct impact assessments for system changes and support configuration and change management processes
Monitor security posture to identify compliance gaps, emerging risks, and remediation priorities
Coordinate remediation activities with system owners, engineers, and governance stakeholders
Prepare systems for assessments, audits, and senior review activities
Support continuous monitoring initiatives, including vulnerability management, reporting, and posture assessments
Communicate complex security topics effectively to both technical teams and leadership audiences


Required Experience & Skills

Experience applying security controls aligned to NIST control catalogs
Experience supporting risk management and authorization processes under formal frameworks (e.g., RMF)
Experience using governance, risk, and compliance tools (e.g., enterprise risk or authorization management platforms)
Experience creating and maintaining security artifacts such as SSPs and POA&Ms
Experience tracking remediation efforts and coordinating closure of identified risks
Experience assessing security impacts of system modifications and configuration changes
Experience supporting system assessments, audits, and executive review processes
Experience monitoring security posture and supporting continuous monitoring activities
Ability to function as a security liaison between engineering teams, operational security, and governance bodies
Strong communication skills with the ability to explain security concepts to varied audiences

Experience Requirements:

HS diploma or equivalent with 8+ years of Information Assurance or security engineering experience
OR
Bachelor’s degree with 5+ years of Information Assurance or security engineering experience


Preferred Experience

Experience supporting operational technology or specialized control systems
Advanced degree in information systems or a related technical discipline
Security certifications such as CASP+ or CISSP