Senior Security Control Assessor

MANTECH; Quantico (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

MANTECH seeks a motivated Senior Security Control Assessor (SCA) to join our team in Washington, DC, Chantilly, VA, Quantico, VA, or Huntsville, AL. The role requires active Top Secret clearance and experience with security assessment and authorization processes.

Responsibilities include managing the SAA package, coordinating IS security inspections, and advising on authorization boundaries, test requirements, and interconnections with FBI and other agencies.

Qualifications

• Minimum 7 years of experience as ISSR or in a similar role at a cleared facility.
• Minimum 10 years of experience in computer science or cybersecurity.
• Must hold CISSP, GISP or CASP or other DoD 8570.1 IAM III level certification.
• Experience with security tools including Nessus and/or Security Center, Guardium, WebInspect, NMAP or similar applications.

Responsibilities

• Provides configuration management infrastructure and environment for the product development team; develops or modifies CM plans, policies, and procedures.
• Manage the SAA process for FBI ISs migrating into the GRC application.
• Provide baseline security controls and recommend authorization boundary.
• Coordinate interconnection security agreements (ISAs), MOUs, MOAs for FBI interconnections.
• Review System Security Plans (SSP) and negotiate testing levels with FBI officials.
• Coordinate IS security inspections, tests, and reviews; submit final SAA package for ATO decision.
• Ensure Security ATO EC is serialized into Sentinel and report vulnerabilities.

Skills

ISSR experience

Cybersecurity

Tenable Nessus

NMAP

Security Center

Education

CISSP

GISP

CASP

Bachelor's degree

Tools

IBM Guardium

HP WebInspect

Job description

MANTECH seeks a motivated, career and customer-oriented Senior Security Control Assessor (SCA) to join our team in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL.

Responsibilities Include, But Are Not Limited To

• Provides overall configuration management infrastructure and environment to the product development team. Developing or modifying CM plans, policies, and procedures tailored to the complexity and scope of the developmental or operational system


• Ensure that FBI ISs are operated, maintained, and disposed of in accordance with the internal security policies and practices outlined in the approved Security Assessment and Authorization (SAA) package. Manage the SAA process for new FBI ISs and legacy FBI ISs migrating into the GRC application


• Provide baseline security controls to the system owner, contingent upon the IS’s security categorization, type of information processed and entity type. Provide a recommendation to the Authorizing Official, in consultation with the system owner, regarding systems’ impact levels and ISs’ authorization boundary


• Initiate, coordinate, and recommend to the FBI Authorizing Official all Interconnection Security Agreement (ISAs), Memorandum of Understanding (MOUs), and Memorandum of Agreement (MOAs) that permit the interconnection of an FBI IS with any non-FBI or joint-use IS


• Perform an independent review of the System Security Plan (SSP) and make approval decisions. Request and negotiate the level of testing required for an IS with the Enterprise Information Security Section and the FBI Authorizing Official.


• Coordinate IS security inspections, tests, and reviews with the Security and system owner. Submit the final SAA package to the FBI Authorizing Official for a security ATO decision. Supporting developmental and operational systems, creating and maintaining configuration baselines. Performing change control and configuration audits


• Ensure that the Security ATO Electronic Communication (EC) is serialized into Sentinel under the applicable case file number. Advise the FBI Authorizing Official of IS vulnerabilities and residual risks.

Minimum Qualifications

• A minimum of 7 years of experience serving as an ISSR or in a similar role at a cleared facility


• A minimum of 10 years’ experience in a computer science or cybersecurity related field


• Must hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP), Global Information Security Professional (GISP), or the CompTIA Advanced Security Practitioner (CASP) or other certifications exemplifying skill sets such as those described in DoD Instruction 8570.1. IAM Level III proficiency.


• Experience with the use and operation of security tools including Tenable Nessus and/or Security Center, IBM Guardium, HP Weblnspect, Network Mapper (NMAP), and/or similar applications

Preferred Qualifications

• Bachelor's or advanced degree in Computer Science, Cybersecurity, or other cyber discipline

Security Clearance Requirements

• Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting this position.


• Must be willing to sit for a polygraph if required.

Physical Requirements

• Must be able to remain in a stationary position 50%.


• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.


• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.


• Often positions self to maintain computers in the lab, including under the desks and in the server closet.


• Frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.