Security Controls Assessor
Synergy ECP · Columbia, MD · 6 days ago
Information TechnologyFull-time
Functions
- Conducts verification and validation for security compliance of all information systems, products, and components
- Analyzes design specifications, design documentation, configuration practices and procedures, and operational practices and procedures
- Provides identification of non-compliance of security requirements and possible mitigations to requirements that are not in compliance
- Conducts on-site evaluations
- Validates the security requirements of the information system
- Verifies and validates that the system meets the security requirements
- Provides vulnerability assessment of the system
- Captures and coordinates penetration testing
- Provides a comprehensive verification and validation report (certification report) for the information system
- Provides process improvement recommendations
- Affords assistance to the Government in drafting standards and guidelines for usage
Requirements
- Twelve years of related work experience
- A Bachelor’s Degree in Computer Science or IT Engineering may be substituted for four years of experience
- Experience in security or system engineering in five or more areas, including: telecommunications concepts, operating systems, databases/DBMS, middleware, applications, web-servers, SANS/Netaps, Active Directory, firewalls, and controlled interfaces
- DoD 8570-1M Change 2 certification