Junior Security Control Assessor

AGE Solutions is looking for a Security Control Assessor, Junior to join our team in support of a cybersecurity risk management and assessment program with our DoD customer.

Responsibilities Include:

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution to ensure security expertise is properly applied.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.

Required Skills, Qualifications and Experience:

• Education and Certifications:
  • Bachelor's degree (IT-related field preferred)
  • DoD 8570 IA Technical (IAT) Level II certification
• Experience:
  • Five (5) years of overall experience in cybersecurity
  • One (1) to three (3) years of experience in a C&A / A&A role
• Citizenship and Clearance:
  • US Citizenship is required.
  • Must have and maintain an active DoD Top Secret clearance with SCI eligibility
• Skills and Knowledge:
  • Demonstrated experience with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
  • Strong understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
  • Demonstrated experience with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
  • Demonstratable understanding in three (3) key technologies areas/domain such as: Network, Windows, UNIX, Oracle, SQL, Applications, Physical Security, RMF, Cloud Environments, End Point Security, and ACAS.
  • Strong written and verbal communication skills for reporting assessment findings.
• Location:
  • This is a remote role requiring approximately 75% travel both CONUS AND OCONUS.
  • Candidates must have a valid US Passport and driver's license, or the ability to obtain one quickly.

The projected salary range for this position is $60,000+ annually. Final compensation will be determined based on factors including years of relevant experience, certifications, skillset, and overall qualifications.