Security Control Assessor - TS/SCI with Polygraph
About The Position
Conduct Security Control Assessments of IC information systems, with specialized expertise evaluating Zero Trust maturity across identity, device, network, application, data, and analytics domains. Review and validate technical evidence of Zero Trust capability implementation, distinguishing verified, testable controls from self-reported claims. Apply hands-on technical knowledge of identity/access management, network segmentation, endpoint detection, data protection, and security monitoring to assess real-world implementation maturity. Identify capability gaps and documents risk-based findings that hold up to senior leadership review. Communicates assessment results clearly to both technical teams and executive stakeholders. Stays current on Zero Trust architecture standards and evolving assessment methodologies.
Requirements
- Bachelor’s degree in computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline.
- Four (4) years of additional demonstrated work experience in Security Control Assessor (SCA) and Defensive Cyber Operations (DCO)Testing will be accepted in lieu of a bachelor’s degree.
- A Master’s degree in an applicable discipline be substituted for three years of demonstrated work experience
- Three (3) years of cybersecurity experience with at least one year of experience conducting SCAs under ICD 503/CNSSI 1253 NIST Cybersecurity Framework, Risk Management Framework (RMF), or a similar framework.
- One full year of SCA experiences within the last three calendar years.
- One full year supporting cloud environment and experience performing security assessments in a cloud environment (AWS, Google, IBM, Azure, and Oracle).
- Must meet Department of Defense (DOD) 8570.01-M baseline certification requirement for Information Assurances Technical (IAT) Level III CASP+CE, CCNP Security, CISA, or CISSP or Associate, GCED, GCIH, or CCSP.
- Knowledge of Independent Verification & Validation (IV&V) of security controls.
- Knowledge of general attack strategies (e.g., MITRE ATT&CK Framework).
- Knowledge of NISPOM, ICD 503, NIST SP 800-53, ICD 705, and other ICDs as appropriate.
- Skill in conducting vulnerability scans and recognizing vulnerability in security systems (e.g., Cloud Environments) ASW, Google, IBM, Azure, and Oracle.
- TS/SCI with Polygraph clearance.
Nice To Haves
- Zero Trust Architect Principal expertise
Responsibilities
- Conduct Security Control Assessments of IC information systems, with specialized expertise evaluating Zero Trust maturity across identity, device, network, application, data, and analytics domains.
- Review and validate technical evidence of Zero Trust capability implementation, distinguishing verified, testable controls from self-reported claims.
- Apply hands-on technical knowledge of identity/access management, network segmentation, endpoint detection, data protection, and security monitoring to assess real-world implementation maturity.
- Identify capability gaps and documents risk-based findings that hold up to senior leadership review.
- Communicates assessment results clearly to both technical teams and executive stakeholders.
- Stays current on Zero Trust architecture standards and evolving assessment methodologies.
- Make recommendations to the IC CISO or designee for improving TTPS for better cyber threat protection.
Benefits
- Comprehensive benefits and wellness packages
- 401K with company match
- Competitive pay
- Paid time off
- Full flex work weeks where possible
- Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
- Short and long-term disability benefits
- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
