Cyber Security Assessor

MCSG Technologies•Oklahoma City, OK

9d•Onsite

About The Position

MCSG Technologies is seeking an entry-level Cybersecurity Assessor to support security assessments and continuous monitoring activities for federal information systems. Working onsite at the Mike Monroney Aeronautical Center in Oklahoma City, Oklahoma, the employee will work under close supervision with senior cybersecurity professionals to evaluate security-control implementation and effectiveness, review technical documentation, and support basic automation and scripting that improves assessment efficiency. The role supports federal staff, project managers, and cybersecurity professionals with continuous monitoring and security assessments of information systems and applications. It includes reviewing system evidence against applicable policies, documenting security weaknesses and potential risks, communicating findings and recommended remediation under senior guidance, and maintaining thorough, organized, and traceable assessment records. The assessor will also help request, review, track, and validate assessment evidence, manage concurrent assessment tasks and deadlines, and contribute to multiple assessment teams while taking ownership of assigned work. Basic technical support may include scripts or data processing for evidence analysis and reporting, automation of evidence collection or tracking, and maintenance of team tools, templates, and tracking systems. No prior work experience is required. Applicants must be U.S. citizens and able to obtain a Public Trust clearance. The position requires an associate’s degree in computer science, information systems, cybersecurity, or a related discipline with a minimum 3.5 GPA and relevant programming coursework, or a higher degree in a related field.

Requirements

Familiarity with information system architecture, networking concepts, system documentation, or software development; coursework or projects are acceptable.
Familiarity with Microsoft Office Suite, including Word, Excel, PowerPoint, and Outlook.
Foundational knowledge of at least one security or risk management framework, such as NIST SP 800-53, NIST SP 800-37, ISO 20001, or another RMF framework; coursework or self-study is acceptable.
Associate’s degree in computer science, information systems, cybersecurity, or a related discipline, with a minimum GPA of 3.5 and relevant programming coursework, or a higher degree in a related field.
Must be a U.S. citizen and able to obtain a Public Trust clearance.
No prior work experience is required.

Nice To Haves

Experience using GRC tools, cybersecurity assessment platforms, or information-system tracking tools through labs, internships, or academic projects.
Exposure to system lifecycle implementation, including documenting and maintaining systems through RMF or similar lifecycles.
Working knowledge of cybersecurity principles, security controls, vulnerability scanning methodologies, system architecture, and common security frameworks.
Knowledge or experience supporting configuration management, change-control processes, or software development, such as through capstone or team projects.
Background in technology, mechanical engineering, or another related discipline.

Responsibilities

Assist federal staff, project managers, and cybersecurity professionals with continuous monitoring and security assessments of information systems and applications.
Review policies, procedures, system documentation, artifacts, and other evidence for compliance with applicable federal and organizational policies.
Help identify and document security weaknesses, assess vulnerability significance, and describe potential risk factors.
Communicate identified weaknesses and recommended remediation steps to federal staff and other stakeholders under senior-staff guidance.
Maintain accurate, organized, defensible assessment documentation traceable to stated objectives.
Request, review, track, and validate large volumes of assessment evidence systematically.
Help balance competing assessment activities and concurrent deadlines while maintaining assessment quality and thoroughness.
Contribute to multiple assessment teams while taking ownership and accountability for assigned tasks.
Perform basic scripting or data processing to support evidence analysis and reporting.
Support automation of evidence collection, reporting, and tracking activities.
Help maintain internal cybersecurity-team tools, templates, and tracking systems.