Security Control Assessor, Mid

AGE Solutions; Oregon; Hybrid; USD 63,000 - 77,000; Full time

Benefits offered by this job

26 Days Paid Leave

Performance Bonuses

401(k) with Match

Life Insurance

Health Benefits

Parental Leave

Military Differential Pay

Tuition Reimbursement

Professional Growth

Shared Success

Job summary

AGE Solutions is seeking a Security Control Assessor (Intermediate) to support a DoD cybersecurity risk management program. You will perform assessments, validate RMF controls, and document findings for DoD information systems.

The role requires a TS clearance with SCI eligibility, DoD 8570 IAT II certification, and extensive experience with STIGs, eMASS, and vulnerability tools. Travel up to 85% across CONUS/OCONUS is expected.

Qualifications

• Bachelor's degree in an IT-related field.
• Five years of cybersecurity or network security experience.
• Three years in a Certification and Accreditation/A&A role.
• Active DoD Top Secret clearance with SCI eligibility.
• DoD 8570 IA Technical (IAT) Level II certification.
• Experience with STIGs, SRGs, POA&Ms and cybersecurity best practices.
• Strong understanding of RMF, NIST SP 800-37/53, CNSSI 1253.
• Experience with eMASS, STIG Viewer, Nessus, ACAS, SCAP or HBSS.
• Knowledge of networks, mobility, Windows/UNIX, cloud environments and HBSS/ESS.
• Strong written and verbal communication for reporting findings.
• Willingness to travel ~85%; DMV or PA regions preferred.

Responsibilities

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations.
• Evaluate systems using cyber threat emulation and testing.
• Adhere to policies for each assessment type.
• Support assessment development and execution of security activities.
• Coordinate logistics and scope with the SCA Team Lead.
• Capture results in eMASS and document findings.
• Analyze security gaps and provide mitigation recommendations.
• Validate RMF controls and DoD policies.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily reviews and briefs with the SCA-R.

Skills

Communication skills

Analytical thinking

Risk assessment

Team collaboration

Education

Bachelor's degree (IT-related field preferred)

DoD 8570 IA Technical (IAT) Level II certification

Tools

eMASS

STIG Viewer

Nessus

ACAS

SCAP

Job description

About UsAGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.AGE Solutions is looking for a Security Control Assessor, Intermediate to join our team in support of a cybersecurity risk management and assessment program with our DoD customer.

Responsibilities Include:

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution to ensure security expertise is properly applied.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.

Requirements:

• Bachelor's degree (IT-related field preferred)
• Five (5) years of overall experience in cybersecurity or network security position
• Three (3) years of experience in a Certification and Accreditation/A&A role
• Must have and maintain an active DoD Top Secret clearance with SCI eligibility
• DoD 8570 IA Technical (IAT) Level II certification
• Demonstrated experience with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
• Strong understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
• Demonstrated experience with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
• Demonstratable understanding of key technologies areas/domain such as: Network, Mobility, Windows, UNIX, Cloud Environments and Cloud Native Tools/Services, Host Based Security System (HBSS)/Endpoint Security Solutions (ESS), Databases, Applications
• Strong written and verbal communication skills for reporting assessment findings.
• Location: This is a remote role requiring approximately 85% travel, both CONUS and OCONUS. Candidates must possess a valid U.S. Passport or have the ability to obtain one in a timely manner.
• Strong preference will be given to candidates who currently reside in the DMV (Washington, DC, Maryland, Virginia) region or Pennsylvania, or who are willing to relocate to one of these areas to support customer requirements and team collaboration activities.

The projected salary range for this position is $70,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.

At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.

• 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
• Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.
• 401(k) with Match: We match 3% of your contributions with immediate vesting.
• Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
• Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
• Parental Leave: 15 days of fully paid leave for new parents, because family matters.
• Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving.
• Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
• Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.

At AGE, you'll do work that matters, supported by a company that delivers for its people.