Security Controls Assessor - TS/SCI & Risk Specialist

Amyx, Inc.; St. Louis (MO); On-site; USD 85,000 - 115,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401(k) with matching

HSA

PTO & 11 holidays

Professional development reimbursement

Job summary

Amyx, Inc. is seeking a Security Control Assessor-Intermediate to support the Cybersecurity Division/NGA Defender in the NCW St Louis, MO area.

The role involves conducting independent assessments of security controls and control enhancements to determine overall effectiveness in line with NIST 800-37. The position requires planning and conducting security authorization reviews, reviewing risk levels, identifying gaps, and developing risk mitigation and compliance processes for services,

Qualifications

• Bachelor degree or higher in CS, Cyber Security, IT, or engineering.
• TS/SCI clearance.
• 8140-based security certifications.
• Experience conducting security assessments and risk analyses.

Responsibilities

• Plan and conduct security authorization reviews and assurance case development.
• Review documents to confirm risk levels are acceptable for each software, system, and network.
• Identify gaps and develop risk mitigation strategies and plans.
• Develop security compliance processes for external services (e.g., cloud providers).
• Maintain and update security documentation and system design features.

Skills

Security assessment

Risk management

Documentation

Communication

Education

Bachelor degree or higher

Tools

Certifications: CAP/CASP+/Cloud+/CYSA+/PenTest+

Job description

Amyx, Inc. is seeking a Security Control Assessor-Intermediate to support the Cybersecurity Division/NGA Defender in the NCW St Louis, MO area.

The role involves conducting independent assessments of security controls and control enhancements to determine overall effectiveness in line with NIST 800-37. The position requires planning and conducting security authorization reviews, reviewing risk levels, identifying gaps, and developing risk mitigation and compliance processes for services,