Cyber Control Assessor

AGE Solutions is looking for a Security Control Assessor to join our team in support of an upcoming cybersecurity program with our DoD customer. The Assessors will be part of a project team responsible for Cybersecurity Assessments and Authorization (A&A), Risk Management and Information Assurance (IA) Support.

This position will require on-site work in Rosslyn, VA. Individuals in this role must be able and willing to travel up to 35% of the time.

Responsibilities Include:

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution to ensure security expertise is properly applied.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs.
• Mentor and guide personnel by providing technical expertise, best practices, and professional development support to enhance team capabilities and knowledge.

Position Requirements:

• Bachelor's degree (Cybersecurity related field preferred). Additional experience can be substituted in lieu of the Bachelors degree.
• Ten (10) years of overall experience in cybersecurity or network security position.
• Three (3) years of experience in a Certification and Accreditation/A&A role.
• Must be a US Citizen with an active DoD Top Secret clearance with SCI eligibility.
• CISSP or equivalent certification.
• Demonstrated experience with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices.
• Strong understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253.
• Demonstrated experience with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS.
• Understanding of one or more key technologies areas/domain such as: Network, Mobility, Windows, UNIX, Cloud Environments and Cloud Native Tools/Services, Host Based Security System (HBSS)/Endpoint Security Solutions (ESS), Databases, Applications.
• Strong written and verbal communication skills for reporting assessment findings.

Work Environment and Physical Demand

• Prolonged periods sitting at a computer.

Compensation: $140,000 - $160,000