Security Operations & Assessment Engineer

Aderas, Inc; Washington (District of Columbia); Hybrid; USD 120.000 - 170.000; Vollzeit

Benefits dieser Stelle

Life/AD&D insurance

Health insurance premium contribution

401k plan with company matching

Paid training & course reimbursement

Paid time off

Zusammenfassung

Aderas, Inc is seeking a Security Operations & Assessment Engineer in Washington, DC with strong RMF/NIST experience. You will evaluate security controls, review system documentation, and analyze vulnerabilities to support ATO decisions.

The role requires federal cybersecurity knowledge, collaboration with ISSOs/ISSMs, and experience in continuous monitoring strategies to align with compliance frameworks.

Qualifikationen

• Proficient with RMF and NIST SP 800-37; familiar with NIST SP 800-53 controls.
• Experience in cybersecurity, system auditing, or security engineering.
• Bachelor’s or higher in a relevant field; professional security certifications are a plus.

Aufgaben

• Evaluate and assess security controls per RMF and NIST standards.
• Review SSPs, SAPs, risk assessments, contingency plans, and PIAs for accuracy.
• Analyze vulnerability scans, DISA STIGs, CIS benchmarks, and architecture diagrams.

Kenntnisse

RMF familiarity (NIST SP 800-37)

FISMA & federal policies

Security auditing / engineering

Ausbildung

Bachelor's degree or higher in IT/Cybersecurity/CS/Engineering

Certifications preferred (CISSP/CISA/CEH/SSCP)

Jobbeschreibung

Aderas is seeking a Security Operations & Assessment Engineer to join the team.

Primary Job Duties:

• Evaluate management, operational, and technical security controls against standards like NIST SP 800-53 (Rev. 5) and NIST SP 800-53A.
• Examine System Security Plans (SSPs), Security Assessment Plans (SAPs), Risk Assessments, Contingency Plans, and Privacy Impact Assessments (PIAs) for accuracy and completeness.
• Analyze vulnerability scan reports, configuration settings (such as DISA STIGs or CIS benchmarks), and network/data flow diagrams to verify real-world implementation.
• Compile results into a formal Security Assessment Report (SAR), detailing control deficiencies, residual risks, and impact levels.
• Track Remediation & POA&Ms: Help evaluate and track Plans of Action and Milestones (POA&Ms) established to fix identified vulnerabilities.
• Lead assessment entrance/exit briefings and work directly with System Owners, Information System Security Officers (ISSOs), and Information System Security Manager (ISSM).
• Provide objective technical data to support the Authorizing Official (AO) in granting or denying an Authorization to Operate (ATO).
• Support continuous monitoring and adaptation to agency-specific continuous monitoring strategies to align with FedRAMP 20x. and other compliance requirements.

Required Experience/Skills

• Deep familiarity with the NIST Risk Management Framework (RMF) (NIST SP 800-37), FISMA requirements, and federal cybersecurity policies.
• Multiple years of experience in cybersecurity, system auditing, or security engineering.

Required Education & Work Experience:

• Bachelors degree or higher in Information Systems Management, Information Technology, Cybersecurity, Computer Science, Business, Management, Engineering, or another related discipline
• Active industry certifications is preferred (common examples include CISSP, CGRC, CISA, CEH, or SSCP).
• Min. Five (5) years of professional IT experience with a master’s degree OR six (6) years of experience with a bachelor’s degree
• Clearance/Citizenship: U.S. Citizen with Secret/T3 clearance
• Location: Hybrid in Washington, DC

Join the Aderas team!

Aderas is looking to recruit and retain only the best and brightest. If you like working with emerging technologies, using your unique personal skills to solve technical, functional, and organizational issues, and can easily adapt to the ever-changing IT market, then Aderas is the place for you! We are a vibrant company delivering implementation services & support for enterprise solutions and custom application development. We strive to form long-term partnerships with our clients to foster an environment based on trust, a proven history of delivery, and camaraderie.

Why Aderas?

We sincerely try to shape our employees' lives by administering a generous package of employee benefits. Our company culture encourages collaboration, creative thinking, and growth.

Beyond the tangible and intangible rewards, Aderas provides the following:

• Pay for Life, AD&D, Short-term disability, and Long-term disability at no cost to the employee.
• Employer contribution toward monthly health insurance premiums.
• 401k plan which employees are eligible for after being with the company for 3 months.
• Safe Harbor plan in which Aderas contributes 3% of employees' salaries once a year.
• A week of paid training and reimbursement for approved professional courses and tests.