Junior Security Control Assessor — RMF/NIST Testing

ANALYGENCE; Washington (District of Columbia); On-site; USD 65,000 - 90,000; Full time

Job summary

Tharros is seeking a Junior Security Control Assessor to support A&A of classified and unclassified information systems, executing security control tests and documenting findings at a Government SCIF in Washington, DC.

You will perform vulnerability testing, review POA&Ms, and assist in preparing A&A packages using the RMF framework and NIST/ CNSSI standards. Strong communication skills and proficiency with MS Office are essential.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' IT/cybersecurity experience.
• Minimum 1 year of RMF security testing or assessment.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.
• Knowledge of RMF and NIST SP 800-53A assessment procedures.
• Knowledge of CNSSI 1253 security control baselines.
• Knowledge of vulnerability scanning and configuration compliance concepts (e.g., STIGs, SCAP).
• Skill in using at least one scanning tool (e.g., Nessus/ACAS, SCAP Compliance Checker, Nmap, STIG Viewer).
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.
• Desired: CompTIA Security+ or CySA+ certification.
• Experience with RSA Archer or a similar GRC tool.

Responsibilities

• Execute security control test procedures against NIST, CNSSI, and IC standards.
• Conduct vulnerability and configuration testing against DISA STIGs and CIS Benchmarks.
• Document control weaknesses and deficiencies for Security Assessment Reports.
• Review POA&M entries for accuracy and completeness.
• Perform quality assurance reviews of SSPs, Security Assessment Plans, and POA&Ms.
• Assist in preparing A&A packages in the GRC tool.
• Support System Security Test Reports and portfolio status reporting.

Skills

RMF knowledge

NIST SP 800-53A

Vulnerability testing

CNSSI 1253

SCAP/STIG testing

Nessus/ACAS

Nmap

STIG Viewer

Documentation

MS Office/Teams

Communication skills

Education

Bachelor's degree in IT/Cybersecurity/Info Systems/CS

Tools

Nessus

ACAS

SCAP Checker

Nmap

STIG Viewer

Job description

Tharros is seeking a Junior Security Control Assessor to support A&A of classified and unclassified information systems, executing security control tests and documenting findings at a Government SCIF in Washington, DC.

You will perform vulnerability testing, review POA&Ms, and assist in preparing A&A packages using the RMF framework and NIST/ CNSSI standards. Strong communication skills and proficiency with MS Office are essential.