Security Control Assessor (SCA)

VTG Defense; Chantilly (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

VTG Defense is seeking multiple levels (Level 2, 3 & 4) of a Security Control Assessor (SCA) for Chantilly, VA and nearby locations. The SCA provides INFOSEC A&A support across an NRO program's lifecycle to Contractor and Government systems processing NRO information.

All positions require TS/SCI with Poly. Level 2 needs BS with relevant experience or equivalent, Level 3/4 require IAM Level II/III and broader qualifications. Competitive pay ranges apply depending on location and experience.

Qualifications

• All positions require TS/SCI with Poly.
• Level 2: BS + 3 years OR HS + 5 years OR AS + 4 years OR MS + 2 years.
• Level 3: BS + 5 years OR HS/AS + 7 years OR MS + 3 years.
• Level 4: BS+10 years OR HS/AS + 15 years.

Responsibilities

• Provide INFOSEC A&A support across an NRO program's lifecycle for Contractor and Government systems processing NRO information.
• Coordinate A&A activities of industry and Government ISs to meet acquisition milestones.
• Develop and implement security directives and guidance for IT-IA-IM.

Skills

Technical project management

IA concepts

Vulnerability assessment

Security program coordination

Security reporting

Information Assurance

A&A coordination

Education

BS/BA in computer engineering / INFOSEC / CS

Level 2/3/4 qualification paths (degrees & experience)

IAM Level I Certification

IAM Level II Certification

Job description

Overview

VTG is looking for multiple levels (Level 2, 3 & 4) of a Security Control Assessor (SCA) in multiple locations. (Note: position is contingent upon program award and the postions are located in Chantilly VA, Auroro CO, Springfield VA, Las Cruces NM, & LAAFB.)

What will you do?

A SCA is a security professional that provides INFOSEC A&A support throughout an NRO program's lifecycle to both Contractor and Government systems processing NRO information.

Do you have what it takes?

Requirements: All positions require TS/SCI with Poly

Level 2 SCA

• Bachelor's degree relevant to computer engineering, INFOSEC, cyber security, information management, and/or computer science
• Level 2 SCA: BS Degree + 3 years OR High School + 5 years OR Associates + 4 years OR Masters Degree + 2 years
• Experience in technical project management
• Familiarity with IA concepts
• Ability to review and recommend vulnerability and risk levels associated SW and HW products
• Ability to provide basic IA support to SCA Level 2 -4 personnel in the conduct of assessment actions
• Practical experience performing ISs A&A as defined in applicable ICDs and guidance
• Practical experience developing and implementing security related directives and guidance for IT-IA-IM
• Practical experience utilizing risk management strategies for IT solutions
• Understanding of emerging technologies and their implementation within Government system and network environments
• Knowledge of IT concepts used in the evaluation of security performance and integrity of state-of-the-art applications, communications systems, HW, SW, satellite control systems, and information processing systems
• Understanding of IT systems, SW, and networks
• Practical experience assessing security of cloud-based systems, including infrastructure as a service (IaaS), platform as a service (PaaS), and/or software as a service (Saas) deployment
• Ability to effectively coordinate A&A activities of industry and Government ISs to meet acquisition milestone requirements
• Effective technical report and general correspondence writing ability
• IAM Level I Certification: CAP, CompTIA Security, GSLC

Level 3 SCA

Level 3 SCA: BS Degree + 5 years OR High School or Associates + 7 years OR Masters Degree + 3 years

Level 3 SCAs should possess all SCA Level 1 and Level 2 qualifications, a compliant IAM Level II certification, and the additional desired qualifications:

• Ability to manage and track systems or programs involved in the A&A process
• Experience developing and implementing security related directives and guidance for IT-IA-IM
• Experience working with a mixed skill level team to ensure that appropriate knowledge and skill transfer occurs
• IAM Level II Certification: CAP, CASP, CISM, CISSP (for Associate), GSCL

Level 4 SCA

Level 4 SCA: BS Degree or higher + 10 years OR High School or Associates + 15 years

Level 4 SCAs should possess all SCA Level 1, Level 2, and Level 3 qualifications, a compliant 1AM Level Ill certification, and the additional desired qualifications:

• Ability to simultaneously manage and track multiple large-scale systems or programs involved in the A&A process
• Experience developing and implementing security related directives and guidance for IT-IA-IM
• In-depth understanding of IT systems, SW, and networks
• Effective technical report and general correspondence writing ability
• IAM Level III Certification: CISSP-ISSEP, CISSP-ISSAP

Pay Range: VTG's estimated starting pay range is $140,000 - 210,000 annually, which is a general guideline for and depending on the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range