Security Control Assessor Skill Level 3

Prime Time Consulting provides clients with expert intelligence analysis services. Our clients include defense contractors, industrial and service corporations, and departments and agencies of the U.S. Federal Government. 

We are actively searching for Security Control Assessor Skill Level 3, located in Maryland, to support our team. We have varying levels of this position, depending on years of experience and education.

Essential Job Duties

•  Conduct verification and validation for security compliance of low and moderately complex information systems, products, and components. Analyze design specifications, design documentation, configuration practices and procedures, and operational practices and procedures. Provide identification of non-compliance of security requirements and possible mitigations to requirements that are not in compliance. Conduct on-site evaluations. Validate the security requirements of the information system. Verify and validate that the system meets the security requirements. Provide vulnerability assessment of the system, coordinate penetration testing, and provide a comprehensive verification and validation report (certification report) for the information system. Provide process improvement recommendations. Draft standards and guidelines for usage.

The Level 3 Security Controls Assessor shall possess the following capabilities:

• Analyze design specifications, design documentation, configuration practices and procedures, and operational practices and procedures
• Conduct on-site evaluations
• Conducts verification and validation for security compliance of low and moderately complex information systems, products, and components
• Provide identification of non-compliance of security requirements and possible mitigations to requirements that are not in compliance
• Validate the security requirements of the information system
• Verify and validate the system meets the security requirements
• Provide vulnerability assessment of the system, coordinate penetration testing, and provide a comprehensive verification and validation report (certification report) for the information system
• Facilitate penetration testing
• Provide a comprehensive verification and validation report (certification report) for the information system

Required Qualifications

• 12 years experience in security, systems engineering or system assessment to include recent experience within the last 3 years in 5 or more of the following areas: Cybersecurity principles and technology, including access/control, authorization, identification and authentication, PKI, network and enterprise security architecture is required.
• Bachelor’s degree in Computer Science or Information Technology Engineering or related field of study is required.
• Master’s degree in Computer Science or Information Technology Engineering or related field of study may be substituted for 2 years experience, reducing the requirement to 10 years experience.
• In lieu of a Bachelor’s degree, an additional 4 years in security or system engineering experience may be substituted.

Certifications Required: 

• DoD 8570 compliance with IAT III or IAM III is required.

Company Perks

• 200 hours of PTO annually
• 6% 401k Contribution
• Competitive Health Care Options
• Short Term/Long Term/Life Insurance
• Annual Training Budget

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, sex, age, national origin, disability, Veteran status, or any other category protected by federal, state, or local laws.