Security Control Assessor Representative (SCA-R)

The role

The Security Control Assessor Representative provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems. This person performs technical and risk-based assessments and develops authorization documentation for Government review.

What you will do

• Use Government-assigned tools and databases to perform weekly updates and complete cybersecurity assessment activities.
• Coordinate with ISSMs, PMOs, system owners, and technical stakeholders.
• Conduct risk analysis, security control assessment, and authorization activities using approved RE5 tools and processes.
• Verify system authorization boundaries and validate system security categorizations.
• Identify applicable data classifications and conduct system-level cybersecurity risk assessments.
• Assess threats, vulnerabilities, control deficiencies, and residual risks.
• Evaluate proposed and implemented system changes and their security impacts.
• Evaluate authorization and change requests including web-filtering, firewall exceptions, and STIG/SRG compliance.
• Review and validate compliance with STIGs, SRGs, and security controls.
• Review, validate, and track Plans of Action and Milestones (POA&Ms).

Required qualifications

• Bachelor's degree
• Minimum of eight (8) years of experience in a cybersecurity or network security position
• Minimum of five (5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities
• Active DoD Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility
• Current DoD 8570 IAM Level III certification
• Demonstrated experience serving as a Security Control Assessor Representative (SCA-R) and performing cybersecurity risk analysis and security control validation
• Advanced understanding and practical application of the Risk Management Framework (RMF), including NIST SP 800-37, NIST SP 800-53, and CNSSI 1253
• Demonstrated experience applying and evaluating Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Plans of Action and Milestones (POA&Ms), cybersecurity security c
• Demonstrated hands-on experience with relevant cybersecurity and RMF tools, including one or more of the following: eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS/Endpoint Security Solutions (ESS)
• Advanced understanding of multiple cybersecurity technology areas and domains, including network technologies and security, mobility, Windows, UNIX/Linux, cloud environments, cloud-native tools and se
• Strong customer service and stakeholder engagement skills
• Ability to analyze complex technical and cybersecurity information and communicate risks through written documentation and technical briefings

Nice to have

• A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field

Benefits

• 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays
• Performance Bonuses
• 401(k) with Match: 3% match with immediate vesting
• Company-paid life insurance up to $300K
• Multiple medical plans, dental, vision, FSA and HSA options
• 15 days of fully paid parental leave
• Military Differential Pay
• Paid training and certifications
• Tuition reimbursement
• CEO commitment to return 80% of net proceeds to employees in the event of a company sale

Before you apply

• Active DoD Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility required

About the company

AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors.