Security Control Assessor (SCA), Expert (TS/SCI with CI or FSP Polygraph) - Hummingbirds Innovations

Title: Security Control Assessor (SCA), Expert

Location: On-site McLean, VA

Job Type: Full-time (40 hours per week) with benefits.
Availability: immediate.
Security Clearance: TS/SCI with CI or FSP Polygraph.

Years of SCA Experience:

• 4 Years with a PhD
• 6 Years with a master’s degree
• 8 years with a BS degree.
• 10 Years with an AA degree
• 12 Years with HS diploma

Job Description

Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems when working either alone or as part of a team. Ensures integrity of IT systems by identifying and mitigating potential avenues of exploitation, including system-level attacks and user-level attacks.

Applies experience with RMF, CNSSI 1253, NIST SP 800-53, and NISPOM

Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)

Demonstrated experience conducting hands-on security testing, analyzing results, documenting risks, and recommending countermeasures

Demonstrated experience developing risk assessment reports based on the review of security plans interviews with developer/customer assessment systems against information assurance policies, regulations, and instructions

Demonstrated experience providing threat analysis based on identified security vulnerabilities Develop and document security evaluation test plans and procedures

Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities, and providing security remediation

Familiarity with securing Operational Technology (OT), including supervisory control and data acquisition {SCADA), distributed control systems {DCS), programmable logic controllers (PLCs), and physical access control systems {PACSs) while addressing their unique performance, reliability, and safety requirements.

Familiarity with NIST SP 800-82 "Guide to Operational Technology (OT) Security," including typical system topologies, common threats, and vulnerabilities, methods, and techniques for securing OT systems, and countermeasures to mitigate associated risk.

Expertise in conducting risk-based assessments within Operational Technology (OT) systems for the identification of potential threats, vulnerabilities, regulatory compliance, documentation/reporting, and impacts on critical operations

Deep understanding of various Operational Technology (OT) systems, architectures, and components and security assessment tools/resources such as MITRE ATT&CK for Industrial Control Systems and the National Vulnerability Database (NVD)

Required Skills:

·    Candidates for this position must have performed one full year of Pen Testing or Security Control Assessment within the last three years in one of the following cloud environments (AWS, IBM, Google, Microsoft Azure, or Oracle Cloud).

·    Compliance and vulnerability scanning tools (XACTA, RedSeal, Nessus, Splunk, McAfee ePO, and other vulnerability scanners)

·    Strong understanding of the Assessment and Authorization (A&A) process

·    Excellent oral and technical writing skills

Desired Certifications: CASP, CCNP Security, CISA, CISSP, GCED, or GCIH

Benefits

• Medical
• Dental
• 401K