DHS Security Control Assessor III

onezerollc; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Parking stipend

Job summary

OneZero Solutions, LLC is seeking a DHS Security Control Assessor III to conduct independent assessments of management, operational, and technical security controls across DHS systems and networks. You will support RMF and ATO processes to help ensure compliant, secure environments before submission to OCIO.

Ideal candidates have 10+ years as a Security Control Assessor in DoD/Federal government, with expertise in NIST SP 800-53, FISMA, RMF, DISA STIGs, and DHS controls.

Qualifications

• 10+ years of direct experience serving as a Security Control Assessor within the DoD/Federal Government.
• Experience within the Intelligence Community and Law Enforcement is a strong plus.
• Demonstrated expertise in NIST SP 800-53, FISMA, RMF, DISA STIGs, and DHS supplemental IA controls.
• Proficiency in conducting security assessments, utilizing tools for vulnerability scanning and configuration review.
• Strong understanding of information security principles, including network/system security, encryption, and incident response.
• Experience with OpenRMF is a strong plus.
• Excellent analytical and problem-solving skills, with strong written and verbal communication; able to work independently and in teams.

Responsibilities

• Conduct independent assessments of the management, operational, and technical security controls employed within various DHS systems and networks.
• Evaluate the effectiveness of implemented controls in mitigating identified risks and protecting sensitive data and systems.
• Identify and document control deficiencies, vulnerabilities, and non-compliance with security policies and guidelines.
• Develop and present clear findings and recommendations to stakeholders and decision-makers.
• Support the implementation of corrective actions to address identified deficiencies and improve overall security posture.
• Stay current with emerging security threats, vulnerabilities, and federal/industry best practices for DHS IT.
• Contribute to the development and continual refinement of internal security assessment methodologies.

Skills

Security Control Assessment

NIST SP 800-53

RMF

DISA STIGs

Vulnerability Scanning

OpenRMF

Written and verbal communication

Independent work

Education

Bachelor's degree

Tools

OpenRMF

Vulnerability scanning tools

Job description

We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO & paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at: https://www.onezerollc.com/careers

Position Title: DHS Security Control Assessor III

Location: NCR

Clearance: TS/SCI

OneZero Solutions is on contract to provide division-wide support for Federal Information Security Modernization Act (FISMA) compliance, execution of the Risk Management Framework (RMF) process to achieve and maintain Authority to Operate (ATO) security authorizations, and deliver cyber security compliance for DHS operational mission systems. We are looking for personnel to support our DHS customer in achieving its mission of providing division-wide cyber security support for operational mission systems and assisting programs as they navigate the ATO process. The result of these efforts will be that the systems meet all the requirements for ATO approval before they are officially submitted to the Office of Chief Information Officer (OCIO).

Qualified Parking Allowance: Employer may provide a monthly stipend or cover the cost of parking for employees who commute to government site by car.

Job Summary

• Conduct independent assessments of the management, operational, and technical security controls employed within various DHS systems and networks.
• Evaluate the effectiveness of implemented controls in mitigating identified risks and protecting sensitive data and systems.
• Identify and document control deficiencies, vulnerabilities, and non-compliance with security policies, regulations, and prescribed hardening guidelines.
• Develop and present clear and concise findings and recommendations to stakeholders and decision-makers.
• Support the implementation of corrective actions to address identified deficiencies and improve overall security posture.
• Stay current with emerging security threats, vulnerabilities, and federal and industry best practices, standards, and policies for employed IT and its continued compliance within DHS.
• Contribute to the development and continual refinement of internal security assessment methodologies and procedures.

Qualifications

• 10+ years of direct experience serving as a Security Control Assessor (SCA) within the DoD/Federal Government.
• Experience within the Intelligence Community and Law Enforcement is a strong plus.
• Demonstrated expertise in various security control frameworks and methodologies, including NIST SP 800-53, FISMA, RMF, DISA STIGs, and DHS supplemental IA controls.
• Proficiency in conducting security assessments, utilizing tools and techniques for vulnerability scanning, penetration testing, and configuration review.
• Strong understanding of information security principles and best practices, including network security, system security, encryption, and incident response.
• Experience with OpenRMF is a strong plus.
• Excellent analytical and problem-solving skills.
• Exceptional written and verbal communication skills.
• Ability to work independently and as part of a team.

Education

Bachelor's degree and/or CRISC, GISP, CASP, CISSP, or other advanced security-related certifications

Additional relevant experience may be considered in lieu of a degree.

OneZero Solutions, LLC is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access www.onezerollc.com/careers as a result of your disability.

To request an accommodation, please contact us at [e-mail] or call [phone].