Junior Security Control Assessor

Jimmy Jazz; Washington (District of Columbia); On-site; USD 70,000 - 100,000; Full time

Job summary

Tharros is seeking a Junior Security Control Assessor to support A&A activities for government systems in a Washington, DC SCIF. You will execute test procedures, conduct vulnerability scans, document findings, and help assemble authorization packages under senior guidance.

Requirements include a 4-year degree (or equivalent experience), familiarity with RMF/NIST controls, and TS/SCI clearance. On-site work and strong communication skills are essential for success in this role.

Qualifications

• BS degree in IT, cybersecurity, information systems or CS, or 4+ years IT/cybersecurity experience.
• Active TS/SCI clearance and U.S. citizenship; willing to take a DHS polygraph.
• Knowledge of RMF, NIST SP 800-53A, CNSSI 1253, and vulnerability scanning concepts.

Responsibilities

• Execute security control tests against NIST, CNSSI, and IC standards.
• Run vulnerability/configuration scans and document findings.
• Assemble and review A&A packages and SSPs/POA&Ms.
• Support RMF assessments and Security Test Reports; maintain portfolio status.

Skills

Communication skills

Documentation skills

Technical writing

Team collaboration

Microsoft Office proficiency

Education

BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

Nessus/ACAS

SCAP Compliance Checker

Nmap

STIG Viewer

RSA Archer

Job description

• Location 1790 Ash Street Southeast,Washington, DC, 20032,United States
• Employee Type Regular Full-Time
• Required Degree 4 Year Degree

Description

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise. In support of this mission, we have an immediate opportunity for a Junior Security Control Assessor.

In this role you will support assessment and authorization (A&A) of classified and unclassified information systems, executing security control test procedures under the direction of senior assessors. You will run vulnerability and configuration scans, document findings, and help assemble authorization packages. This position is on-site in a Government SCIF in Washington, DC.

• Execute security control test procedures against NIST, CNSSI, and IC standards.
• Conduct vulnerability and configuration testing against DISA STIGs and CIS Benchmarks.
• Document control weaknesses and deficiencies for Security Assessment Reports.
• Review POA&M entries for accuracy and completeness.
• Perform quality assurance reviews of SSPs, Security Assessment Plans, and POA&Ms.
• Assist in preparing A&A packages in the GRC tool.
• Support System Security Test Reports and portfolio status reporting.

Requirements

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' experience in IT or cybersecurity.
• Minimum of 1 year of experience in RMF security testing or assessment.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.
• Knowledge of the Risk Management Framework (RMF) and NIST SP 800-53A assessment procedures.
• Knowledge of CNSSI 1253 security control baselines.
• Knowledge of vulnerability scanning and configuration compliance concepts (e.g., STIGs, SCAP).
• Skill in using at least one scanning tool (e.g., Nessus/ACAS, SCAP Compliance Checker, Nmap, STIG Viewer).
• Ability to document findings clearly and accurately.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.
• CompTIA Security+ or CySA+ certification.
• Experience with RSA Archer or a similar GRC tool.

Summary

Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward.

In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations.

Tharros. See Everything. Secure Anything.

Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.