Control Validation Security Specialist

Electrosoft; Fort Belvoir (VA); On-site; USD 85,000 - 95,000; Full time

Job summary

Electrosoft Services, LLC is an award-winning company delivering technology-based solutions to federal customers. The role as Control Validation Security Specialist focuses on IT audits, security control validation, and risk assessment in alignment with DoD and NIST standards.

The position emphasizes audit readiness, vulnerability analysis, and documented findings. Responsibilities include evaluating security requirements, supporting SSAE-18 and annual audits, and providing technical guidance to

Qualifications

• Two years of experience with DoD 8500.2 or NIST SP 800-53 and RMF.

Responsibilities

• Perform IT audits on complex information systems, applications, and enclaves for control validation.
• Evaluate security requirements and ensure procedures comply with Federal and DoD standards.
• Provide guidance on audit readiness and interpretation of regulations.
• Support SSAE-18, financial statement audits, and audit logging processes.
• Offer technical support in vulnerability and risk assessments, network security, and security implementation.
• Evaluate customer systems and assist with security improvements.
• Conduct cybersecurity control validation on unclassified networks and systems.
• Weigh business needs against security concerns and assess mitigations.

Skills

DOD 8500.2 / NIST SP 800-53 RMF

Analytical problem solving

Microsoft Excel

Microsoft Access

eMASS familiarity

Security risk assessment

Security reporting & documentation

Education

Associates degree or higher

Tools

Microsoft Excel

Microsoft Access

eMASS

RMF (800-53 rev5)

Job description

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Control Validation Security Specialist

Responsibilities and Duties:

• Under general supervision, performs IT audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist, are correctly implemented, and that procedures comply with Federal and DOD standards.
• Conducts accurate evaluation of the level of security required.
• Performs procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
• Provide guidance and assistance in the formulation and implementation of audit readiness issues requiring new approaches, establishment of precedents, or the interpretation of controversial law, regulation, or past practice.
• Supports the Financial Statement Audit, Annual Statement of Assurance, SSAE-18 Audit, and the Audit Logging eOPR.
• Provides technical support in the areas of vulnerability assessment, risk assessment, network security, and security implementation.
• Provides technical evaluations of customer systems and assists with making security improvements.
• Conducts cybersecurity control validation exercises on unclassified networks, applications, and systems to validate the effectiveness of current security measures.
• Understands the concept of weighing business needs against security concerns and analyzes applied mitigations to evaluate whether they meet security requirements.

Basic Qualifications:

• Two (2) years of experience working with DOD1 8500.2 or NIST SP 800-53 and understanding of the principles of the risk management framework.
• Strong analytical and problem-solving skills for resolving security issues.
• Proficiency in basic analytical software such as Microsoft Excel and Access, proficiency with the Microsoft Office suite, to include Word, PowerPoint
• Understanding of Enterprise Mission Assurance Support Service (eMASS)
• Understands the concept of weighing business needs against security concerns.
• Experience analyzing applied mitigations to evaluate whether they meet security requirements.
• Knowledge of RMF (800-53 rev5)
• Experience with technical report writing and ability to provide evidentiary matter associated with findings and recommendations
• Relevant certification from a nationally recognized authority
• DoD Approved 8570 Baseline Certification: Category IAM-I or minimum of IAT-II

Preferred Qualifications

• Previous SCAR or Auditor experience preferred.
• Associates or higher degree preferred
• Previous experience with FISCAM 2024 a plus.
• Knowledge of Enterprise Log Management Systems and other systems as appropriate for log reviews, also a plus.

Pay Range: $85,000 USD - $95,000 USD

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled