Junior Security Control Assessor

The Newberry Group•Fort Meade, MD

2d•$50,000 - $60,000•Hybrid

About The Position

Newberry Group seeks a Jr. Security Control Assessor to support its Government Client. This role requires significant travel to various government locations both domestically and internationally. The position is hybrid, with approximately 25% remote support and up to 75% CONUS and OCONUS travel. Candidates applying for this role may be placed in a pipeline for future openings if an immediate position is not available.

Requirements

Bachelor's degree in a related area of study (i.e. Security, Information Technology).
0-1 year of experience required.
Active DoD Top Secret clearance with SCI eligibility is preferred but can begin with a secret clearance.
IAT Level II certification active or will obtain within 90 days of hire.
CompTIA Cybersecurity Analyst (CySA+)
CompTIA Security.
EC-Council Certified Network Defense (CND) v3.
Red Hat Certified System Administrator (RHCSA)
CCNA Security.
Global Industrial Cyber Security Professional (GICSP)
GIAC Security Essentials (GSEC)
Systems Security Certified Practitioner (SSCP)
Strong written and verbal communication skills for reporting assessment findings.

Nice To Haves

Familiarity with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices desired.
Understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253 desired
Familiarity with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS desired
Willing to train on both technologies and RMF.
DoD Top Secret/SCI Clearance required or Interim Top Secret preferred.

Responsibilities

Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
Adhere to policies and processes for each assessment type.
Support assessment development and execution to ensure security expertise is properly applied.
Coordinate logistics, test plans, and scope with the SCA Team Lead.
Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
Analyze security gaps and provide mitigation recommendations.
Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
Provide risk analysis and assessment results for authorization recommendations.
Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.
Review applicable controls to determine compliance status and enter all test results into the designated repository (Enterprise Mission Assurance Support Service (eMASS)).
Provide key assessment results to the team lead to include the number of controls reviewed and risk/residual information for inclusion in the authorization recommendation.
Be certified via the ACP IAW the ACP CONOPS before conducting any assessments.
Be certified in a minimum of two (2) technologies and RMF Control Validation before conducting any assessments.
Maintain active accounts to the tools and systems required to perform risk assessments.
Participate in the in-brief and out-brief of each assessment.