Job Description Job Description
Security Control Assessor
Target Salary: $65K to $75K
LOCATION: DLIFLC, 1759 Lewis Road, Monterey, CA 93944
Position Overview:
The Security Control Assessor is responsible for conducting independent, comprehensive assessments of the management, operational, and technical security controls and control enhancements within or inherited by an information technology (IT) system. The primary objective is to determine the overall effectiveness of these controls, as defined in NIST 800- 37.
Job Duties:
- Conduct comprehensive assessments of management, operational, and technical security controls.
- Evaluate compliance with NIST SP 800-53, NIST RMF, FedRAMP, DoD RMF, and agency-specific requirements.
- Develop Security Assessment Plans (SAPs).
- Execute control testing and validation activities.
- Review system documentation, architectures, and security artifacts.
- Assess cybersecurity risks and determine residual risk levels.
- Identify control deficiencies and recommend remediation actions.
- Validate Plans of Action & Milestones (POA&Ms).
- Support Authorization to Operate (ATO) decisions.
- Ensure compliance with federal and regulatory requirements.
- Document findings, vulnerabilities, and risk determinations.
- Present assessment results to system owners, ISSOs, ISSMs, and Authorizing Officials.
- Track remediation efforts and reassessment activities.
Job Requirements:
- Educational requirements include AA/AS from an accredited college or university or substitute with 3+ years of equivalent technical related experience.
- Must have following relevant Skills: ACAS, Microsoft Defender, STIGs, Microsoft 365, SaaS Security, RHEL, Windows Server, MacOS, and eMASS.
- Must be able to evaluate Security Controls: Perform thorough evaluations to ensure compliance with NIST 800- 37 and related standards.
- Must be able to identify and Recommend Improvements: Assess control effectiveness, identify vulnerabilities, and recommend enhancements.
- Must be able to document and Report Findings: Provide detailed reports and communicate findings to stakeholders.
- Must be able to collaborate with Teams: Work with IT and security teams to implement recommended measures.
Required to Start Qualifications:
- IAT Level II Certification is required to Start (CCNA Security, CSA+, GICSP, GSEC, Security+ CE, or SSCP) Certification
- A NACLC Public Trust Clearance is required to Start.
Company Description
Dexian Government Solutions is an award-winning, ISO 9001:2015 certified, business and GSA contract holder providing diversified Information Technology services to both Civilian and Defense agencies. Services include Software Development, Systems Integration, Data Management, Project Management, Operations & Maintenance, Cybersecurity, and Training and Audio/Visual (AV) Solutions. Dexian Government Solutions has received several recognitions, including rankings on "Top 50 Companies to Watch