Jobs
>
Fairfax

    Security Control Assessor - McLean, United States - General Dynamics Information Technology

    General Dynamics Information Technology
    General Dynamics Information Technology McLean, United States

    4 weeks ago

    General Dynamics Information Technology background
    Description

    REQ#:
    RQ173502

    Public Trust:

    None Requisition Type:
    Regular Your Impact Own your opportunity to serve as a critical component of our nation's safety and security. Make an impact by using your expertise to protect our country from threats. Job Description Seize your opportunity to make a personal impact as a Security Control Assessor supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. At GDIT, people are our differentiator. As a Security Control Assessor, you will help ensure today is safe and tomorrow is smarter.

    Our work depends on a Security Control Assessor joining our highly skilled team to be a premier provider of cyber security services to the customer.

    We provide consummate cyber security risk management "as a service" platform across multiple fabrics and centers.

    We have responsibility to ensure operational IT capabilities provide the client with necessary timeliness, accuracy and security of information demanded from all our highly professional roles.

    Be the change, lead our change - join us HOW A SECURITY CONTROL ASSESSOR WILL MAKE AN IMPACT * Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.


    • Evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems working either alone or as part of a team.
    • Ensures integrity of IT systems by identifying and mitigating potential avenues of exploitation including system level attacks and user level attacks.
    • Applies experience with RMF, CNSSI 1253, NIST SP 800-53, and NISPOM
    • Applies experience with Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) Compliance Checker (SCC)
    • Demonstrated experience conducting hands on security testing, analyzing results, documenting risks, and recommending countermeasures
    • Demonstrated experience developing risk assessment reports based on review of security plans and interviews with developer/customer assess systems against information assurance policies, regulations and instructions
    • Demonstrated experience providing threat analysis based on identified security vulnerabilities
    • Develops and documents security evaluation test plans and procedures
    • Demonstrated experience testing security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation
    • Familiarity with securing Operational Technology (OT), including supervisory control and data acquisition {SCADA), distributed control systems {DCS), programmable logic controllers (PLCs), and physical access control systems {PACSs) while addressing their unique performance, reliability, and safety requirements.

    WHAT YOU'LL NEED TO SUCCEED:

    • Education: Bachelor's Degree (Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline)
    Required Experience: 10+ yrs


    • Clearance: TS/SCI with Polygraph
    • Required Technical Skills:
    • Familiarity with NIST SP "Guide to Operational Technology (OT) Security", to include typical system topologies, common threats and vulnerabilities, methods and techniques for securing OT systems and countermeasures to mitigate associated risk.
    • Expertise in conducting risk-based assessments within Operational Technology (OT) systems including the identification of potential threats, vulnerabilities, regulatory compliance, documentation/reporting, and impacts on critical operations
    • Deep understanding of various Operational Technology (OT) systems, architectures and components and security assessment tools/resources such as MITRE ATT&CK for Industrial Control Systems and the National Vulnerability Database (NVD)
    • Compliance and vulnerability scanning tools (XACTA, RedSeal, Nessus, Splunk, McAfee ePO, and/or other vulnerability scanners)
    • Strong understanding of the Assessment and Authorization (A&A) process
    • Excellent oral and technical writing skills
    • Desired Certifications:
    • CASP, CCNP Security, CISA, CISSP, GCED, or GCIH
    • Security Clearance Level: TS/SCI with active polygraph
    • Location: McLean, VA - On Customer Site #OpportunityOwned #GDITCareers #WeAreGDIT #JET #IntelAprilCampaignReqs

    GDIT IS YOUR PLACE:
    * 401K with company match

    • Comprehensive health and wellness packages
    • Internal mobility team dedicated to helping you own your career
    • Professional growth opportunities including paid education and certifications
    • Cutting-edge technology you can learn from
    • Rest and recharge with paid vacation and holidays Work Requirements

    cls-1{fill:

    none;stroke:
    #5b6670;stroke-miterlimit:10;stroke-width:2px} Years of Experience 8 + years of related experience * may vary based on technical training, certification(s), or degree

    cls-2{fill:

    none;stroke:
    #5b6670;stroke-miterlimit:10;stroke-width:2px} Certification Travel Required Less than 10%

    cls-3{fill:

    none;stroke:
    #5d666f;stroke-miterlimit:10} Citizenship U.S. Citizenship Required Salary and Benefit Information The likely salary range for this position is $148,750 - $201,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. View information about benefits and our total rewards program. About Our Work We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.


  • Syneren Technologies Corporation Vienna, United States

    **Job Title**: Telecom Security Control Assessor (Remote/Hybrid) · Syneren is seeking an experienced Telecom Security Control Assessor. · **Responsibilities**: · - 10+ years of experience in Information Security. · - 5+ years of experience with security control assessment methodo ...


  • Parsons Chantilly, United States

    In a world of possibilities, pursue one with endless opportunities. Imagine Next · When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace ...


  • System High Corporation Arlington, United States

    **Position Overview** · The Security Control Assessor must fulfill a variety of cybersecurity functions, to include: System Administrator, Enterprise Oversight, certification and accreditation, SAP and SCI assessment and authorization (A&A), Platform Information Technology (PIT) ...


  • Modern Technology Solutions, Inc. Washington, United States

    Own Your Future. · Modern Technology Solutions, Inc. (MTSI) is seeking a **Security Control Assessor (SCA) II** to join our team. · **Why is MTSI known as a Great Place to Work?** · - ** Interesting Work**: Our co-workers support some of the most important and critical programs t ...


  • Maximus Services, LLC Arlington, United States

    **Description & Requirements** · Maximus is searching for a Security Control Assessor (SCA) to join a DoD program in Arlington, VA. · The Security Control Assessor is responsible for conducting a comprehensive assessment of the management, operational, and technical security cont ...


  • Zermount Inc Arlington, United States

    **Security Control Assessor Team Lead**: · **MILITARY FRIENDLY & PREFERRED - HOH SPONSOR**: · **Summary** · Zermount Inc. is seeking a Security Control Assessor Team Lead who will play a vital role in leading multiple teams on large projects. The System Security Assessment Team L ...


  • General Dynamics Information Technology Bethesda, United States

    Type of Requisition: · Regular · Clearance Level Must Currently Possess: · Top Secret SCI + Polygraph · Clearance Level Must Be Able to Obtain: · Top Secret SCI + Polygraph · Suitability: · Public Trust/Other Required: · None · Job Family: · Cyber Security · Job Qualifications: · ...


  • Zachary Piper Solutions Reston, United States

    Zachary Piper Solutions is seeking FedRAMP Security Controls Assessor for a long-term, remote opportunity headquartered in Reston, Virginia. The Sr. FedRAMP Assessor will facilitate and support Security Controls Assessments and high-level Continuous Monitoring Activities in c ...


  • Bering Straits Native Corporation (BSNC) Washington, United States

    Overview: · **SUMMARY** · Bering Global Solutions, LLC, a subsidiary of Bering Straits Native Corporation is currently seeking a qualified Security Control Assessor, Lead for a government client in Washington, DC. The selected individual will guide system owners, designated IT se ...


  • Allen Integrated Solutions Chantilly, United States

    Job Description · Job DescriptionTop Secret SCI w/Polygraph Required · Security Control Assessor (SCA), Level 2 · Chantilly, VA · Security Control Assessor (SCA) Qualifications · A Security Control Assessor (SCA) is a security professional that provides information security Asses ...


  • Goldbelt, Inc. Washington, United States

    Overview: · Goldbelt Hawk designs, develops, and implements comprehensive solutions for problem spaces, including computer security, scalable architectures, advanced analytics, artificial intelligence, and network/data center operations. Specializing in local and enterprise-level ...


  • Leidos Suitland, United States

    **Description** · Leidos National Security Sector has a dynamic opportunity for a **Security Controls Assessor/Assessment and Authorization Specialist** to work at our customer site at the National Maritime Intelligence Center in Suitland, MD (all work is performed on site). · ** ...


  • Global Resource Solutions, Inc. Washington, United States

    Global Resource Solutions, Inc. (GRS) is seeking an enthusiastic, motivated, detail orientated, and talented individual for the position of Security Control Assessor I. · **Job Descriptio**n**: · **Summary**: The SCA is responsible for conducting a comprehensive assessment of the ...


  • General Dynamics Information Technology State Farm, United States

    The Security Control Assessor is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the contr ...


  • General Dynamics Information Technology West Bethesda, United States

    A career as a Security Control Assessor at GDIT means owning every opportunity to help support and advance our clients' missions. At GDIT, cyber security is embedded into every aspect of what we do. We're constantly evolving our cyber solutions to overcome our clients' biggest ch ...


  • K2 Technical, LLC Bolling AFB, United States

    The SCA I is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented ...


  • MAXIMUS, Inc. Arlington, United States

    & Requirements · Maximus is searching for a Security Control Assessor (SCA) to join a DoD program in Arlington, VA. · The Security Control Assessor is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed wi ...


  • Zermount, Inc Arlington, United States

    Job Description · Job Description Security Control Assessor Team Lead MILITARY FRIENDLY & PREFERRED - HOH SPONSORSummary · Zermount Inc. is seeking a Security Control Assessor Team Lead who will play a vital role in leading multiple teams on large projects. The System Security As ...


  • MAXIMUS Arlington, United States

    Job Description Summary · Maximus is searching for a Security Control Assessor (SCA) to join a DoD program in Arlington, VA. The Security Control Assessor is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls emp ...


  • VetJobs Arlington, United States

    Job Description · At General Infomatics, Inc. we pride ourselves on providing program support, healthcare services, strategic technology solutions, and knowledge management to US government agencies worldwide, under standards of integrity, trust, and a commitment to excellence. ...