Security Control Assessor Representative; SCAR

Title

Security Control Assessor Representative (SCAR)

Security Control Assessor Representative (SCAR)

K  is seeking a Security Control Assessor Representative (SCAR) to join our team.

• Innovative Projects: K ’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.
• Collaborative Environment:
  Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
• Impactful Work:
  Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense

The selected applicant will provide cybersecurity support to systems and applications for the Test Resource Management Center (TRMC) and the Research, Development, Test and Evaluation (RDT&E) Community. The security controls assessor (SCA) will be responsible for evaluating the security controls within our networks/systems to identify vulnerabilities and recommend actions to correct problems, working with the TRMC Cybersecurity team.

• Conduct in-depth assessments of the management, operations, and technical security controls.
• Analyze information and prepare reports describing the vulnerability level of the network/system with specific detail as to what compromises data systems.
• Develop a plan to address vulnerabilities and continue to monitor the security of network systems.
• Alongside the TRMC Cybersecurity Team Lead develop and implement cybersecurity independent audit processes for application software/networks/systems and oversee ongoing independent audits to ensure processes and procedures are in compliance with organizational and mandatory cybersecurity requirements and accurately followed by Systems Administrators and other cybersecurity staff when performing their day-to-day activities.
• Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).
• Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
• Perform validation steps, comparing actual results with expected results and analyze the differences to identify impact and risks.
• Apply confidentiality, integrity, and availability principles.
• Draft statements of preliminary or residual security risks for system operation
• Maintain information systems assurance and accreditation materials.
• Responsible for identifying, assessing, and managing cybersecurity capabilities and services, providing leadership, team coordination, and subject matter expertise in Assessment and Authorization (A&A) packages and leveraging the A&A process steps as a means for system authorization.
• Review and analyze Plans of Actions and Milestones (POAMs), Security Assessment Reports (SAR), Security Assessment Plans (SAP).
• Conduct required vulnerability analysis to support mitigation and residual risk determination.
• Provide Risk Management Framework guidance and assistance to system engineers and program managers on assessment and risk-related matters and make risk recommendations.
• Review security requirements, products, configurations, and cybersecurity architectures for compliance with DoD policies.
• Support a general working knowledge of applicable assessment methods, such as Secure Technical Implementation Guides (STIGs) and automated vulnerability scans and analyze technical test data.
• Participate in technical interchanges, security impact assessments and security assessment meetings with PMs, Cyber Team Lead, ISSOs/lSSMs and the AO

• Subject Matter Expert (SME) with proven experience regarding…