Security Controls Assessor

Oneida Technical Solutions•Sumter, SC

2d•Onsite

About The Position

Oneida Technical Solutions, LLC (OTS) is seeking a Security Controls Assessor to provide cybersecurity support to AFCENT. This role is onsite at Shaw AFB in Sumter, SC. The primary responsibility is to perform comprehensive IT security control assessments on AFCENT systems and software applications. These assessments will involve physical travel to various contractor and Government sites, both within and outside the continental United States (CONUS and OCONUS). The goal is to determine the effectiveness of management, operational, and technical security controls by evaluating their implementation, intended operation, and ability to meet security requirements.

Requirements

Must possess and maintain a Secret Clearance
Proof of IAT-III or IAM-III Certification

Nice To Haves

MA/MS in related field AND 3 or more years' relevant experience (for Senior positions)
BS in related field AND 5 or more years' relevant IT experience (for Senior positions)
7 or more years' relevant IT experience (for Senior positions)
BS in related field AND 1 or more years' relevant experience (for Mid-level or lower positions)
Associates in related field and 3 or more years' relevant IT experience (for Mid-level or lower positions)
5 or more years' of relevant IT experience (for Mid-level or lower positions)

Responsibilities

Perform initial and continual security control assessment and validation for AFCENT networks, systems, and software applications.
Utilize DOD approved tools such as Assured Compliance Assessment Solution (ACAS), Nessus, Host Based Security Systems (HBSS), Continuous Monitoring Risk Scoring (CMRS), Online Compliance Reporting System (OCRS), and SolarWinds to generate reports.
Complete reports to support risk decisions from the AO.
Provide an assessment on the severity of weaknesses or deficiencies and recommend corrective actions.
Review the System Security Plan (SSP) prior to assessment.
Advise the Information System Owner (ISO) concerning the impact values for confidentiality, integrity, and availability.
Evaluate threats and vulnerabilities to ascertain the need for additional safeguards.
Assist in creating, reviewing, and approving the security assessment plan.
Ensure security control assessments are completed and controls are working as intended.
Assist with preparing the final Security Assessment Report (SAR).
Ensure a Plan of Action and Milestones (POA&M) is initiated.
Evaluate security control assessment documentation and provide written recommendations for security authorization.
Provide expertise to execute vulnerability assessments on Platform IT systems.
Assist with assembling and submitting the security authorization artifacts to the AO.
Assess proposed changes to information systems to determine if they are security-relevant.
Utilize the RMF methodology to protect the element's information assets and mission.
Provide guidance to other assessors on policies and procedures.
Provide detailed assessment findings using Government-specified processes and procedures.
Provide solutions and recommendations to remedy security vulnerabilities and threats.
Utilize assessment results to identify trends and improve IA training, policies, and processes.
Develop reports and trend analysis's to support risk assessment decisions.