Control Validation Security Specialist W/Secret Clearance

TekSynap•Fort Belvoir, VA

4d•Hybrid

About The Position

We are seeking a Control Validation Security Specialist. This role involves performing IT audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist, are correctly implemented, and that procedures are in compliance with Federal, DOD and DLA standards. The specialist will conduct accurate evaluations of security levels, ensure the safety of information systems assets, and protect systems from intentional or inadvertent access or destruction. The position requires working at the highest level of all phases of information systems auditing, providing technical support in vulnerability assessment, risk assessment, network security, and security implementation, and conducting cybersecurity control validation exercises. The role also involves providing technical evaluations of customer systems, assisting with security improvements, and analyzing applied mitigations to ensure they meet security requirements.

Requirements

3 years of experience working with DOD 8500.2 or NIST SP 800-53, and understand the principles of the Risk Management Framework (RMF).
2 years of experience with eMASS
Strong analytical and problem-solving skills for resolving security issues
Competent to work at the highest level of all phases of information systems auditing.
Demonstrated ability to independently perform IT audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist, are correctly implemented, and that procedures are in compliance with Federal, DOD and DLA standards.
Proficiency in basic analytical software such as Microsoft Excel and Access, proficiency with the Microsoft Office suite, to include Word, PowerPoint.
Demonstrated experience supporting government agencies, customers, or contracts within federal environments. This includes the Intelligence Community (IC), Department of Defense (DoD), Federal Civil agencies, and military organizations.
DoD 8570 IAM Level III Baseline Certification
Certified Information Security Manager (CISM)
Certified Information Systems Security Professional (CISSP)
GIAC Security Leadership Certification (GSLC)
Certified Chief Information Security Officer (CCISO)
Secret - IT-II (Tier 3) clearance
U.S. Citizen

Nice To Haves

Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.

Responsibilities

Perform IT audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist, are correctly implemented, and that procedures are in compliance with Federal, DOD and DLA standards.
Conduct accurate evaluation of the level of security required.
Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
Work at the highest level of all phases of information systems auditing.
Provide technical support in the areas of vulnerability assessment, risk assessment, network security, and security implementation.
Provides technical evaluations of customer systems and assists with making security improvements.
Conducts cybersecurity control validation exercises on classified and unclassified networks, applications and systems to validate the effectiveness of current security measures.
Must be able to weigh business needs against security concerns and be able to analyze applied mitigations to evaluate whether they meet security requirements.