Security Control Assessor, Junior

AGE Solutions • Fort Meade, MD

3h • $55,000 • Remote

About The Position

AGE Solutions is seeking a Security Control Assessor, Junior to join their team in support of a cybersecurity risk management and assessment program with a DoD customer. This role involves conducting cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN. The position requires evaluating systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing, adhering to policies and processes for each assessment type, and supporting assessment development and execution to ensure security expertise is properly applied. The role also includes coordinating logistics, test plans, and scope with the SCA Team Lead, performing vulnerability assessments, capturing results using STIG Viewer or designated tools, and documenting findings in eMASS. Analysis of security gaps and provision of mitigation recommendations, validation of cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines are key responsibilities. The role provides risk analysis and assessment results for authorization recommendations and requires participation in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.

Requirements

• Bachelor's degree (IT-related field preferred)
• Three (3) years of overall experience in a DoD or Federal IT environment
• Must have an active DoD Top Secret clearance with SCI eligibility
• DoD 8570 IA Technical (IAT) Level II certification required
• Familiarity with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
• Understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
• Familiarity with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
• Strong written and verbal communication skills for reporting assessment findings.
• Candidates must have a valid US Passport, or the ability to obtain one quickly.

Responsibilities

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution to ensure security expertise is properly applied.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.

Benefits

• 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays.
• Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results.
• 401(k) with Match: We match 3% of your contributions with immediate vesting.
• Financial Protection: Company-paid life insurance up to $300K and options for additional coverage.
• Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options.
• Parental Leave: 15 days of fully paid leave for new parents.
• Military Differential Pay: We bridge the gap for employees on active duty.
• Professional Growth: Paid training and certifications, tuition reimbursement.
• Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level