Security Controls Assessor

DigiFlight, Inc.; Fort Meade (MD); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health, Dental, Vision, and Flexible Spending Account

Paid Time Off (PTO)

11 paid holidays

Tuition Education Assistance

401(k) retirement plan

Life insurance

Employee Referral Program

Job summary

A leading defense contractor seeks a Security Controls Assessor in Fort Meade, MD. The role requires conducting verification and validation for security compliance on complex information systems. Candidates must have significant experience, possibly substituted with a relevant degree, and must meet specific security requirements. Benefits include health coverage, paid time off, and a strong focus on employee professional development.

Qualifications

• Nine years of related work experience.
• Experience in security or system engineering in telecommunications, operating systems, databases, and middleware.
• Must meet DoD 8570-1 M Change 2 IAT Level II requirements.

Responsibilities

• Conduct verification and validation for security compliance.
• Provide identification of non-compliance and mitigations.
• Validate the security requirements of the information system.

Skills

Security compliance analysis

Vulnerability assessment

Penetration testing coordination

Operational practices evaluation

Education

Bachelor's degree in computer science or IT Engineering

Tools

Active Directory

Firewalls

SANS/Netaps

Databases/DBMS

Job description

Security Controls Assessor - TS/SCI Fullscope Poly
Fort Meade, MD

Role description

Security Controls Assessor: Conducts verification and validation for security compliance of low and moderately complex information systems, products, and components. Analyzes design specifications, design documentation, configuration practices and procedures, and operational practices and procedures. Provides identification of non-compliance of security requirements and possible mitigations to requirements that are not in compliance. Conducts on-site evaluations. Validates the security requirements of the information system. Verifies and validates that the system meets the security requirements. Provides vulnerability assessment of the system, coordinates penetration testing, and provides a comprehensive verification and validation report (certification report) for the information system.

Education and Experience

Nine years of related work experience. A bachelor’s degree in computer science or IT Engineering may be substituted for four years of experience. Experience in security or system engineering in three or more areas, including telecommunications concepts, operating systems, databases/DBMS, middleware, applications, web-servers, SANS/Netaps, Active Directory, firewalls, and controlled interfaces, DoD 8570-1 M Change 2 IAT Level II requirements.

Our People

DigiFlight attracts the most highly skilled workforce to protect some of our nation’s most sensitive systems. Our diverse team provides innovative solutions as they support critical clients in tackling tough challenges. Most importantly, our team is passionate about their work and making a difference. Our corporate culture promotes a healthy work/life balance.

Our Benefits

DigiFlight’s competitive benefits package allows employees to manage their personal and professional portfolios through a variety of features and programs. Our benefits include:

• Health, Dental, Vision, and Flexible Spending Account
• Paid Time Off (PTO)
• 11 paid holidays
• Tuition Education Assistance
• Professional Development
• 401(k) retirement plan
• Life insurance and short- and long-term disability insurance
• Employee Referral Program
• Marketing Incentive Plans

DFI offers a highly competitive, family-oriented benefits package.