Junior Security Control Assessor

Job Title: Junior Security Control Assessor

Location: Ft. Meade - Hybrid-Remote

Years

Experience:

1-4 years

Clearance: US Citizen w/ Active Secret Clearance (willing to OBTAIN TS/SCI)

August Schell is looking for a Security Control Assessor, Junior to join our team in support of a cybersecurity risk management and assessment program with our DoD customer. The Assessors will be part of a project team responsible for Cybersecurity Assessments and Authorization (A&A), Risk Management, Information Assurance (IA) Support, and Risk Adjudication and Connection services. Individuals in this role must be able and willing to travel extensively, approximately 85%.

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution to ensure security expertise is properly applied.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA‑R.

• Bachelor's degree (IT-related field preferred)
• Three (3) years of overall experience in a DoD or Federal IT environment
• Must have experience in at a minimum 3 of the following technology areas:
  Network, Windows, Unix, End Point Security, Cloud, Application, SQL, Oracle, ACAS, Traditional, RMF
• Have an active Secret with a willingness to upgrade to DoD Top Secret with SCI eligibility
• DoD 8570 IAT Level II certification
• Security+ CE
• CCNA
• CySA+
• GICSP
• GSEC
• CND
• SSCP
• Familiarity with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
• Understanding of the RMF process, NIST SP 800-37, NIST SP 800-53, CNSSI 1253
• Familiarity with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
• Strong written and verbal communication skills for reporting assessment findings.

This job description in no way states or implies that these are the only duties to be performed by the employee(s) of this position. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. All duties and responsibilities are essential functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities.

August Schell Enterprises Inc. is an Equal Employment Opportunity Employer. We are committed to providing a workplace that is free from discrimination and harassment based on race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, marital status, disability, protected veteran status or any other characteristic protected by applicable law.

If you are an individual with a disability and would like to request a reasonable accommodation during the application or hiring process, please contact Human Resources at