Control Validation Security Specialist

About the role

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. Our employees enjoy a sense of teamwork, camaraderie, and recognition for outstanding effort.

Responsibilities

• Perform IT audits on complex information systems, applications, and enclaves to ensure appropriate controls exist, are correctly implemented, and comply with Federal and DOD standards.
• Conduct accurate evaluation of the level of security required.
• Perform procedures to ensure the safety of information systems assets and protect systems from intentional or inadvertent access or destruction.
• Provide guidance and assistance in the formulation and implementation of audit readiness issues requiring new approaches, establishment of precedents, or interpretation of controversial law, regulation, or past practice.
• Support the Financial Statement Audit, Annual Statement of Assurance, SSAE-18 Audit, and the Audit Logging eOPR.
• Provide technical support in vulnerability assessment, risk assessment, network security, and security implementation.
• Provide technical evaluations of customer systems and assist with making security improvements.
• Conduct cybersecurity control validation exercises on unclassified networks, applications, and systems to validate the effectiveness of current security measures.
• Understand the concept of weighing business needs against security concerns and analyze applied mitigations to evaluate whether they meet security requirements.

Requirements

• Two (2) years of experience working with DOD 8500.2 or NIST SP 800-53 and understanding of the principles of the risk management framework.
• Strong analytical and problem-solving skills for resolving security issues.
• Proficiency in basic analytical software such as Microsoft Excel and Access, and the Microsoft Office suite (Word, PowerPoint).
• Understanding of Enterprise Mission Assurance Support Service (eMASS).
• Experience analyzing applied mitigations to evaluate whether they meet security requirements.
• Knowledge of RMF (800-53 rev5).
• Experience with technical report writing and ability to provide evidentiary matter associated with findings and recommendations.
• Relevant certification from a nationally recognized authority.
• DoD Approved 8570 Baseline Certification: Category IAM-I or minimum of IAT-II.

Preferred Qualifications

• Previous SCAR or Auditor experience.
• Associates or higher degree.
• Previous experience with FISCAM 2024.
• Knowledge of Enterprise Log Management Systems and other systems for log reviews.

Pay

$85,000 USD - $95,000 USD