Security Control Assessor (SCA)

System High Corporation; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

System High Corporation is seeking a Senior Cybersecurity Specialist to fulfill a broad set of cybersecurity functions, including system administration, enterprise oversight, and A&A support for SAP/SCI and PIT assessments. The role ensures compliance with DoD, DARPA, and national security standards to protect critical information systems.

You will participate in Joint Certification and Accreditation events for DoD SAP information systems and support systems processing CUI to Top Secret data,

Qualifications

• Experience with DISA, NSA, CNDSP and CCRI (Computer Readiness Inspections).
• Experience with network security devices, classified LAN/WAN, PKI, virtual machines, and end-point security solutions.

Responsibilities

• Participate in DISA, NSA, CNDSP and CCRI assessments.
• Apply and interpret DoD/NISPOM, JSIG, CNSSP, CNSSD guidance and security controls.

Skills

Network security

PKI

Virtual machines

End-point security

DISA/CNDSP/CCRI

Job description

Position Overview

The Security Control Assessor must fulfill a variety of cybersecurity functions, to include: System Administrator, Enterprise Oversight, certification and accreditation, SAP and SCI assessment and authorization (A&A), Platform Information Technology (PIT) assessment and authorization, Information Assurance and Technical Security for AIS, Information Technology (IT) Network Administration & Support, and Information System Security Officer support. Will perform the IA tasks necessary to ensure that the existing DARPA IA program meets National, DoD, and DARPA IA standards, and continues to protect and defend DARPA information and Information Systems (IS) by ensuring the confidentiality integrity, availability, authentication, and non-repudiation of the systems.

The Senior Cybersecurity Specialist possesses experience in successfully participating in DoD Special Access Program Joint Certification and Accreditation, Assessment, and Approval events for DoD Joint cyber ranges and/or jointly accredited SAP information systems. The DARPA systems to be protected include systems that process and store information from controlled unclassified (CUI) up to Top Secret, including SAP and SCI caveats/compartments.

Duties shall include, but are not limited to the following:

• Must possess experience in successfully meeting and participating in Defense Information System Agency (DISA), National Security Agency, and USCBYERCOM Computer Network Defense Program (CNDSP) and CBYERCOM Computer Readiness Inspections (CCRI)
• Experience with network security devices, classified Local Area Networks, Wide Area Networks, public key infrastructure (PKI), virtual machines, and end-point security solutions.
• Must be thoroughly familiar with, understand, and be able to apply the standards and requirements contained in the following:

1. DoD Instruction 5220.22 National Industrial Security Program (NISPOM) Operating Manual, Chapter 8
2. Defense Security Service Manual for the Certification and Accreditation of Classified Systems under the NISPOM Version 3.2
3. DoD Directive 5205.16 The DoD Insider Threat Program
4. NIST SP 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations
5. DoD Joint Special Access Program Implementation Guide (JSIG)
6. Committee for National Security System Policy (CNSSP) Policy (CNSSP) No. 22 on Information Assurance Risk Management for National Security Systems
7. CNSSP No. 26 National Policy on Reducing the Risk of Removable Media
8. Committed for National Security Systems Directive (CNSSD) No. 504 Directive on Protecting National Security Systems From Insider Threat
9. Committee for National Security System Instruction (CNSSI) No. 1253 Security categorization and Control Selection for National Security Systems
10. DoDD 8000.1, Management of DoD Information Resources and Information Technology
11. DoD Directive 8100.2, Use of Commercial Wireless Devices, Services