Security Controls Assessor – Journeyman

🕒 il y a 28 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Avint

Site WebLinkedInTous les Emplois

11 - 50 employés

💼 Conseil

🎖️ Défense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

Avint est une société de conseil en cybersécurité spécialisée dans la fourniture de solutions de transformation pour les secteurs de la défense, du renseignement et de la sécurité nationale. Fondée par un leader de l'industrie de la cybersécurité, Avint offre des services de cybersécurité innovants et intuitifs aux agences fédérales et aux organisations commerciales, les aidant à sécuriser leurs systèmes contre les menaces cybernétiques. L'entreprise est détenue par une femme et un vétéran handicapé de service, avec une équipe de praticiens experts en cybersécurité, y compris des ingénieurs cybernétiques, des data scientists et des stratèges. Avint se concentre sur la construction, le maintien et l'optimisation des solutions de cybersécurité pour les infrastructures critiques, offrant des services allant de la stratégie et des opérations à la validation de la conformité et au conseil en gestion.

Description

• Conduct security control assessments of information systems using interview, examination, and testing methods • Verify compliance with established frameworks such as NIST SP 800-37, NIST SP 800-53, NIST SP 800-171, FISMA, and/or FedRAMP, depending on organizational requirements • Analyze system architectures, network diagrams, configuration settings, and policies to identify vulnerabilities and compliance gaps • Review vulnerability scanning results (e.g., Nessus, Qualys) and penetration testing reports to validate the implementation of technical controls • Document detailed testing results and draft sections of the Security Assessment Report (SAR), ensuring clear explanations of non-compliant findings • Present assessment findings and risk postures to Authorizing Officials (AO), system owners, and other stakeholders in clear, actionable terms • Assist system owners in the development of realistic Plans of Action and Milestones (POA&M) to remediate identified deficiencies • Collaborate with the Risk Management team to ensure assessment data accurately informs the organization’s continuous monitoring strategy • Stay current on emerging cyber threats, vulnerabilities, regulatory changes, and assessment techniques • Identify opportunities to automate assessment processes and integrate modern tooling into the assessment lifecycle • Participate in the development and refinement of enterprise information security policies, standards, and guidelines

🎯 Exigences

• Bachelor’s degree (BS/BA) OR equivalent professional experience • Security+ or higher • Minimum of 6-8 years of dedicated experience in cybersecurity, information assurance, or IT auditing • At least six (6) years of dedicated experience performing hands-on security controls assessments of systems of moderate complexity (C2 & C3) with capability of supporting C4 assessments • Must be a U.S. citizen (no dual citizenship) • Ability to pass a background investigation • Able to obtain and maintain DHS Suitability/Entry on Duty (EOD) • Strong attention to detail and organized documentation habits • Good analytical and troubleshooting abilities • Professional verbal and written communication skills, with an ability to collaborate effectively across technical boundaries.

🏖️ Avantages

• competitive salaries • full health insurance • generous time off • observation of federal holidays • reimbursement for courses, exams, and tuition • investment in employee professional development