RedTrace Technologies

Protects information systems and advises on operations

Security Control Assessor 2

Security Governance, Risk & CompliancePosted on Nov 14

Full-timeNew Mexico, USA$166k - $181k

About the Job

Requirements

A Bachelor's degree in a related discipline and 7 years of related experience, an Associate's degree and 9 years of related experience, or 11 years of related experience with no degree.
At least 4 years of SAP, SCI, or Collateral information system security experience.
Prior experience performing as an ISSO, ISSM, or SCA.
DoD 8570 IAM Level II certification, such as CISSP, CASP+, or CISM.
Expert knowledge of DoD, national, and service/agency security policy, manuals, and standards.
Ability to regularly lift up to 50 pounds.
Top Secret clearance with SCI eligibility, eligibility for access to SAP information, and willingness to submit to a Counterintelligence polygraph.

Responsibilities

Perform oversight of the development, implementation, and evaluation of IS security program policy, with special emphasis on integrating existing SAP network infrastructure.
Assess information systems using the Risk Management Framework (RMF) in accordance with the Joint SAP Implementation Guide (JSIG).
Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and Delegated/Authorizing Official (DAO/AO) on assessment and authorization issues.
Evaluate authorization packages and recommend authorization decisions to the AO/DAO.
Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required.
Advise the Government on Confidentiality, Integrity, and Availability impact levels.
Complete and document security assessments and prepare the Security Assessment Report (SAR) for each authorization boundary.
Initiate a Plan of Action and Milestones (POA&M) for weaknesses identified in the SAR.
Assess proposed changes to authorization boundaries, operating environments, and mission needs to determine continued authorization to operate.
Review and concur with sanitization and clearing procedures, and assist with Government compliance inspections and cybersecurity incidents.
Evaluate hardware and software for security impact and evaluate Continuous Monitoring Plans.
Apply working knowledge of systems at Protection Levels 3 and 4 (PL3/PL4) and Cross-Domain Solutions (CDS), including joint CDS assessments with other DoD agencies.
Travel 10%-25%.

Desired Qualifications

Military experience in the listed enlisted, officer, or warrant officer MOS/AFSC/rating specialties, or civilian equivalent GS-2210 Information Technology Specialist (INFOSEC).

SECURITY CLEARANCE REQUIREMENT: TS, WITH SCI ELIGIBILITY
***POSITION REQUIRES US CITIZENSHIP***
Position Title: Security Control Assessor II (SCA II)
Location: Kirtland AFB, NM

The anticipated salary range for this position is $166,000 - $181,000. Actual compensation will be determined based on the candidate’s qualifications and experience, geographic location, contractual requirements, and other relevant business considerations. The final salary may fall outside the stated range.

Position Description:
The Security Control Assessor (SCA) conducts comprehensive assessments of the management, operational, and technical security controls employed within or inherited by an information system to determine their overall effectiveness, assesses the severity of weaknesses or deficiencies, and recommends corrective actions. Responsibilities cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer’s area of responsibility.

We are seeking an SCA II to carry out the following duties and responsibilities:

Perform oversight of the development, implementation, and evaluation of IS security program policy, with special emphasis on integrating existing SAP network infrastructure
Assess information systems using the Risk Management Framework (RMF) in accordance with the Joint SAP Implementation Guide (JSIG)
Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and Delegated/Authorizing Official (DAO/AO) on assessment and authorization issues
Evaluate authorization packages and recommend authorization decisions to the AO/DAO
Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required
Advise the Government on Confidentiality, Integrity, and Availability impact levels
Complete and document security assessments and prepare the Security Assessment Report (SAR) for each authorization boundary
Initiate a Plan of Action and Milestones (POA&M) for weaknesses identified in the SAR
Assess proposed changes to authorization boundaries, operating environments, and mission needs to determine continued authorization to operate
Review and concur with sanitization and clearing procedures, and assist with Government compliance inspections and cybersecurity incidents
Evaluate hardware and software for security impact and evaluate Continuous Monitoring Plans
Apply working knowledge of systems at Protection Levels 3 and 4 (PL3/PL4) and of Cross-Domain Solutions (CDS), including joint CDS assessments with other DoD agencies

Qualifications:

Required:

9-11 years of related experience: Bachelor’s degree in a related discipline and 7 years, Associate’s degree and 9 years, or no degree and 11 years
4+ years of SAP, SCI, or Collateral information system security experience
Prior performance as an ISSO, ISSM, or SCA
DoD 8570 IAM Level II certification (e.g., CISSP, CASP+, CISM)
Expert knowledge of DoD, national, and service/agency security policy, manuals, and standards
Able to regularly lift up to 50 lbs
10%-25% Travel

Security Clearance:

TS with SCI eligibility
Eligibility for access to Special Access Program (SAP) Information
Willingness to submit to a Counterintelligence polygraph

Military Experience Welcome (MOS / AFSC / Rating):

Enlisted: Army 25D, 17C, 25B; Air Force 1D7X1 (formerly 3D0X2), 1B4X1; Navy Cryptologic Technician Networks (CTN), Information Systems Technician (IT); Marine Corps 1721, 0689
Officer and Warrant Officer: Army 17A, 25A, 26B, 170A, 255S; Air Force 17D, 17S; Navy 1820, 1840; Marine Corps 1702, 0602
Civilian equivalent: GS-2210 Information Technology Specialist (INFOSEC)

Employee Benefits:

Competitive salary for well-qualified applicants
401(k) plan
Annual performance bonus
Certification and advanced degree attainment bonuses
Student Loan / Tuition reimbursement
Health Care Insurance (medical, dental, vision)
Up to four weeks of paid vacation
11 Federal Holidays, and 3 Floating Holidays
Team bonding events

RedTrace Technologies is an EOE employer

About the Company

RedTrace Technologies

Protects information systems and advises on operations

RedTrace Technologies provides cybersecurity, information technology and management consulting services to commercial organizations and US federal agencies. Its specialists help clients identify cyber threats, protect sensitive systems and maintain the technology used in mission-critical operations. The company also advises on business strategy and processes, manages projects and supports intelligence activities associated with digital threats. It earns revenue from contracted professional services and technical delivery, including work for civilian agencies, the Defense Department and the intelligence community. Founded in 2018, the privately held business is based in Lanham, Maryland.

Company size: 11-50
Company stage: Not listed
Total funding: Not listed
Headquarters: Lanham, MD
Founded: 2018

Recently Posted Jobs

Explore more opportunities at RedTrace Technologies

See more jobs