CONTROL VALIDATION SECURITY SPECIALIST

CONTROL VALIDATION SECURITY SPECIALIST SENIOR (QA/Test Engineer)

Independently performs IT audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist, are correctly implemented, and that procedures are compliant with Federal and DOD standards. Conducts accurate evaluation of the level of security required. Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Works at the highest level of all phases of information systems auditing. Provides technical support in the areas of vulnerability assessment, risk assessment, network security, and security implementation. Provides technical evaluations of customer systems and assists with making security improvements. Conducts cybersecurity control validation exercises on classified and unclassified networks, applications, and systems to validate the effectiveness of current security measures. Weighs business needs against security concerns and analyzes applied mitigations to evaluate whether they meet security requirements.

Minimum Requirements:

• Three (3) years of experience working with DOD1 8500.2 or NIST SP 800-53 and understand the principles of the Risk Management Framework (RMF).
• Two (2) years of experience with eMASS
• Strong analytical and problem-solving skills for resolving security issues.
• Proficiency in basic analytical software such as Microsoft Excel and Access, proficiency with the Microsoft Office suite, to include Word, PowerPoint
• Strong skills implementing and configuring networks and networks components.
• Experience weighing business needs against security concerns.
• Experience analyzing applied mitigations to evaluate whether they meet security requirements.
• Must possess IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) prior to onboarding