Security Control Assessor

MANTECH•Washington, DC

1d•$141,500 - $236,000•Onsite

About The Position

ManTech is seeking a motivated, career, and customer-oriented Senior Security Control Assessor (SCA) to join our team in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL. The successful candidate will provide expert security assessment and authorization (SAA) guidance, configuration management, and baseline security control support to safeguard critical intelligence and operational systems.

Requirements

Minimum of 7 years serving as an Information System Security Representative (ISSR) or in a similar role at a cleared facility.
Minimum of 10 years of experience in computer science or cybersecurity-related fields.
Must hold at least one (1) DoD 8140/8570 compliant certification: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CISSP-ISSAP, CySA+, GSLC, GSNA, CCNP Enterprise, GCIA, GDSA, or GICSP.
Hands-on experience with security evaluation and vulnerability assessment tools, including Tenable Nessus / Security Center, IBM Guardium, HP Web Inspect, Network Mapper (NMAP), or similar applications.
Must possess an active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting.
Must be willing to sit for a polygraph examination if required.

Nice To Haves

Bachelor’s or advanced degree in Computer Science, Cybersecurity, or a related cyber discipline.

Responsibilities

Provide overall configuration management (CM) infrastructure and environment support to the product development team.
Develop or modify CM plans, policies, and procedures tailored to the complexity and scope of developmental and operational systems.
Ensure FBI Information Systems (ISs) are operated, maintained, and disposed of in accordance with internal security policies and approved Security Assessment and Authorization (SAA) packages.
Manage the SAA process for new and legacy FBI ISs migrating into the GRC application.
Provide baseline security controls to system owners based on system categorization, entity type, and processed information.
Recommend system impact levels and authorization boundaries to the Authorizing Official in consultation with system owners.
Initiate, coordinate, and recommend Interconnection Security Agreements (ISAs), Memoranda of Understanding (MOUs), and Memoranda of Agreement (MOAs) permitting interconnection between FBI ISs and non-FBI or joint-use systems.
Perform independent reviews of System Security Plans (SSPs) and make approval decisions.
Negotiate required testing levels for ISs with the Enterprise Information Security Section and the FBI Authorizing Official.
Coordinate security inspections, tests, and reviews with security personnel and system owners.
Submit final SAA packages to the FBI Authorizing Official for ATO decisions.
Maintain configuration baselines, perform change control, and conduct configuration audits for developmental and operational systems.
Ensure Security ATO Electronic Communications (ECs) are serialized into Sentinel under applicable case file numbers.
Advise the FBI Authorizing Official of IS vulnerabilities and residual risks.