Junior Security Control Assessor

Job Summary
Newberry Group seeks a Jr. Security Control Assessor to support its Government Client. This role requires 85% travel to various government locations both domestically and internationally.
Location 
Hybrid position – approx. 25% remote support with up to 75% CONUS and OCONUS travel. 

Clearance
Active Secret Clearance (will sponsor). DoD Top Secret/SCI Clearance required or Interim Top Secret preferred. 

Certifications
DoD 8570 IAT II (active or will obtain within 90 days of hire)

Contingencies
If an opening is not currently available, candidates applying to this role will be placed in our pipeline for future openings within this contract's program.

Compensation
$50,000 - $60,000

Primary Responsibilities:

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution to ensure security expertise is properly applied.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.

For each RMF Review, the assessors shall perform the following:  

• The candidate will be required to review applicable controls to determine compliance status and enter all test results into the designated repository (Enterprise Mission Assurance Support Service (eMASS)

• Providing key assessment results to the team lead to include the number of controls reviewed and risk/residual information for inclusion in the authorization recommendation.   

• The candidate will be required to be certified via the ACP IAW the ACP CONOPS before conducting any assessments.   

• The candidate must be certified in a minimum of two (2) technologies and RMF Control Validation before conducting any assessments. Training through the DISA program will be provided after hire and consist of at least 3 months.  

• The contractor shall maintain active accounts to the tools and systems required to perform risk assessments.   

• The candidate will be required to participate in the in-brief and out-brief of each assessment.   

Qualifications:

• Bachelor's degree in a related area of study (i.e. Security, Information Technology).
• 0-1 year of experience required. Willing to train on both technologies and RMF. 
• Active DoD Top Secret clearance with SCI eligibility is preferred but can begin with a secret clearance. 
• IAT Level II certification active or will obtain within 90 days of hire.
  • ​​ CompTIA Cybersecurity Analyst (CySA+)
  • CompTIA Security.
  • EC-Council Certified Network Defense (CND) v3.
  • Red Hat Certified System Administrator (RHCSA)
  • CCNA Security.
  • Global Industrial Cyber Security Professional (GICSP)
  • GIAC Security Essentials (GSEC)
  • Systems Security Certified Practitioner (SSCP)
• Familiarity with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices desired. 
• Understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253 desired
• Familiarity with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS desired
• Strong written and verbal communication skills for reporting assessment findings.

Who We Are…
Today’s leading government agencies are putting their trust in Newberry Group, and for good reason. 
Newberry brings strength to our clients, from the inside out, through:
•    client intimacy and superior quality,
•    presence and accountability in our relationships, and
•    Public sector best practices.
Newberry Group is a professional services firm, providing information security compliance, governance, program/project management, and mission-critical project-based consulting to public sector clients nationwide. 
The strength of our company is a direct reflection of our highly skilled and talented workforce.

Benefits and Perks
In addition to competitive wages, Newberry Group offers an outstanding benefit package. This includes medical coverage with three plan options, dental and vision coverage, personal time off, paid holidays, paid parental leave, telecommuting if available, retirement savings accounts (Pre-Tax and Roth), flexible and dependent care savings accounts, life insurance, long and short-term disability coverage, tuition and training reimbursement, employee assistance program, and more.
The Newberry Group, Inc. is an Equal Opportunity Employer – EEO/AA/Disability/Veterans.