Security Control Assessor Representative

Goldbelt, Inc.•San Diego, CA

About The Position

Peregrine is a pioneer within the cybersecurity industrial control systems and the Internet of Things, supporting many federal and commercial customers. Peregrine's experienced staff knows the cybersecurity and operational technology environment and provides these capabilities for our customers daily. The Security Control Assessor – Representative will perform a risk-based review and evaluation A&A process for classified systems to evaluate system security plans (SSPs) leading to an authorization decision.

Requirements

Proficiency in Microsoft Office Suite
Solid client service, time management and leadership skills as well as written and verbal communication skills
BA or BS degree in Information Technology or Engineering preferred
Cybersecurity experience
Certified at IAT Level II (CCNA Security, CSA+, GICSP, GSEC, Security+ CE, SSCP)
Approved personnel with Secret clearance
Pass an employer background check
Must be a U.S. Citizen

Nice To Haves

Certified IAT Level III (CISSP, CASP)
Experience with DoD RMF

Responsibilities

Maintain expert-level knowledge of all NIST 800-53 Security Controls
Maintain working knowledge of DoD, DCSA, and NIST RMF guidance and policies
Perform SSP reviews in accordance with the plan
Use critical thinking to aid decision-making and highlight paths that will help achieve desired outcomes during risk-based analysis
Assess SSPs, document the findings, and make recommendations.
Review and evaluate A&A artifacts in submission documentation.
Provide information security services such as system security documentation evaluation and other support activities connected with the implementation of the Risk Management Framework (RMF)
Evaluate system security package submissions for authorization of classified systems against defined DCSA and Government technical standards.
Acquire and maintain NISP eMASS account for daily use
Attend and participate in training on the NISP eMASS tool
Be familiar with the NIST RMF and be able to process and track packages through the NISP Enterprise Mission Assurance Support Service (eMASS).
Use NISP eMASS as an approved repository for artifacts and Plans of Action and Milestones (POA&M)
Provide written documentation for each SSP review that includes: A summary of actions taken as part of the review, including dates and names when applicable, Quantitative measurements that capture and evaluate communications and information technology support, identify trends, and measure performance relative to SSP reviews, Analysis of the review, Clear rationale for outcomes and defensible recommendations, Sufficient information to enable the Government to assess and authorize decisions