Senior Security Control Assessor

Jimmy Jazz; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

Tharros, supporting DHS cybersecurity across its Intelligence Enterprise, seeks a Senior Security Control Assessor. This on-site role in a Government SCIF in Washington, DC leads complex RMF assessments across CDS, SAP, and cloud environments.

You will guide junior staff, improve SOPs, and advance the authorization process toward ongoing authorization and reciprocity. Active TS/SCI clearance and U.S. citizenship are required.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 10 years' experience in IT or cybersecurity.
• Minimum of 7 years' experience in RMF security control assessment.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.

Responsibilities

• Lead the most complex RMF assessments within the portfolio (CDS, SAP, cloud, etc.).
• Mentor junior assessors and guide SOP improvements in the authorization process.
• Develop and improve assessment procedures and SOPs.
• Provide specific recommendations to correct weaknesses or deficiencies in controls and vulnerabilities.

Skills

Lead complex assessments

Mentor junior staff

SOP development

RMF knowledge

Excellent written and verbal comms

Microsoft Office Suite

Strong analytical skills

Cross Domain Solutions experience

Education

BS degree in IT/Cybersecurity/CS OR 10+ years IT experience

Tools

Nessus/ACAS

WebInspect

Job description

• Location 1790 Ash Street Southeast,Washington, DC, 20032,United States


• Employee Type Regular Full-Time


• Required Degree 4 Year Degree

Contact information

• Name Talent Acquistion


• Email [e-mail]

Description

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise.

In support of this mission, we have an immediate opportunity for a Senior Security Control Assessor. In this role you will lead the most complex assessments in the portfolio, including Cross Domain Solutions (CDS), Special Access Program (SAP) systems, C-LAN extension sites, and cloud environments. You will guide junior assessors, improve A&A standard operating procedures, and help modernize the authorization process toward ongoing authorization and reciprocity. This position is on-site in a Government SCIF in Washington, DC.

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 10 years' experience in IT or cybersecurity.


• Minimum of 7 years' experience in RMF security control assessment.


• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.


• Knowledge of ICD 503, CNSSI 1253, and the Risk Management Framework (RMF).


• Knowledge of Cross Domain Solution or SAP system assessment requirements.


• Knowledge of cloud security authorization concepts.


• Skill in using at least two security tools (e.g., Nessus/ACAS, SCAP, WebInspect, SonarQube, STIG Viewer).


• Skill in developing and improving assessment procedures and SOPs.


• Ability to lead complex assessments and mentor junior staff.


• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.


• Excellent written and oral communications skills.

Requirements

• Must have an active TS/ SCI


• Requires 7-10 years related experience.


• Must be able to assess the security controls employed within and inherited by an information system using assessment procedures specified in the security assessment plan.


• Must be able to provide specific recommendations on how to correct weaknesses or deficiencies in the controls and address identified vulnerabilities.


• Excellent written and verbal communication skills.
  
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.

Summary

Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward.

In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations.

Tharros. See Everything. Secure Anything.

Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.