Senior Security Controls Assessor (TS/SCI)

Synergy ECP; Columbia (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

Synergy ECP in Columbia, MD seeks a Senior Security Controls Assessor (SCA) to assess overall security compliance of client information systems. The role requires TS/SCI clearance and DoD 8570-1M certification knowledge, with extensive experience across operating systems, networks, and security testing.

You will conduct vulnerability assessments, coordinate penetrations, and deliver certification reports, while guiding secure topology and architecture discussions for client environments.

Qualifications

• Twelve years of related work experience.
• Bachelor's Degree in Computer Science or IT Engineering may be substituted for four years of experience.
• Experience in security or system engineering in five or more areas, including: telecommunications concepts, operating systems, databases/DBMS, middleware, applications.

Responsibilities

• Verifies and validates security compliance of all information systems, products, and components.
• Analyzes design specifications, configuration practices and procedures, and operational practices.
• Identifies non-compliance and suggests mitigations for non-compliant requirements.
• Conducts on-site evaluations and validates security requirements.
• Coordinates vulnerability assessments and penetration testing.
• Produces a comprehensive verification/validation report for the information system.
• Provides process improvement recommendations and assists in drafting standards.

Skills

Out-of-the-box thinking

Presentation skills

Report writing

Windows knowledge

UNIX/Linux knowledge

TCP/IP knowledge

Hacking methodology

Network topology

Network diagram reading

Continuous learning

Education

B.S. in CS/IT

Tools

Job description

Synergy ECP in Columbia, MD seeks a Senior Security Controls Assessor (SCA) to assess overall security compliance of client information systems. The role requires TS/SCI clearance and DoD 8570-1M certification knowledge, with extensive experience across operating systems, networks, and security testing.

You will conduct vulnerability assessments, coordinate penetrations, and deliver certification reports, while guiding secure topology and architecture discussions for client environments.