Security Control Assessor

M9 Solutions is seeking a Security Control Assessor to work on a government contract for a client located inReston, VA. An active TS/SCI clearance is required.

Responsibilities

• Support the Assessment and Authorization (A&A) Risk Management Framework process for all client managed systems, networks, and enclaves (all security domains).
• Ensure validity and accuracy of all associated documentation, and the integrity of all systems.
• Support remote sites when required.
• Assist in the centralization of A&A files/documentation and maintain files/library.
• Create, update, and delete entries in databases utilized for the tracking of system and network compliance.
• Ensure that all IA systems are properly documented with Configuration Management processes.
• Maintain the security accreditation status of systems/sites including the review of current documentation and site architectures, and coordinate with sites to ensure the documentation is accurate with the current site architecture, IAW policy and processes.
• Perform and support all assessment and authorization (A&A) efforts for systems, networks, and applications (all security domains).
• Coordinate assessment metric submissions.
• Provide direct support in the development of other A&A related systems bodies of evidence in accordance with current NIST, ICD, DIAD guidance, using the government provided A&A tool (i.e. XACTA).
• Work in coordination with both internal and external systems administrators, configuration management, and network engineers to ensure proper configuration and adherence to security standards in regard to deployment actions.
• Conduct formal Security Test and Evaluation and Security Certifications of systems, networks, and sites, assessing security control compliance, and providing technical guidance on security policies, remediation, and mitigation of identified vulnerabilities; ensure that all documentation meets policy and regulatory requirements.
• Develop all supporting test reports, supporting artifacts, and plan of action of milestones (POA&M), document open findings, prepare formal authorization packages, oversee the resolution of POA&Ms, and develop and maintain assessment and authorization enterprise schedules and metrics.
• Support management and maintenance of assessment and authorization repositories.

Required Skills & Qualifications

• Active TS/SCI security clearance with willingness to get a CI Poly.
• Ability to work on-site 4 days per week from one of the following locations: Reston, Tysons, or Charlottesville, VA, Oxon Hill or College Park, MD, Denver, CO, Tampa, FL, or St. Louis, MO.
• Must have at least some certification Level II.