Security Control Assessor

Job Title

Security Control Assessor - Intermediate (Information Assurance Support Services)

San Antonio, TX

BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science; or military training; or CGRC/CAP; or CASP+; or Cloud+; or Pen Test+; or Security+; or GSEC; or CISSP

Microsoft Certified:
Azure Administrator Associate or Microsoft Certified:
Windows Server Hybrid Administrator Associate

• Conduct vulnerability scans and security control assessments to validate compliance with DoD and DHA cybersecurity policies, STIGs, and IAVM directives.
• Maintain and validate asset inventories within ACAS and eMASS, ensuring all enterprise assets are credentialed, scanned, and reported accurately.
• Develop and maintain Plan of Action and Milestones (POAandMs) for identified vulnerabilities, providing remediation strategies and tracking progress through closure.
• Support the IS accreditation process by preparing risk assessment packages, security documentation, boundary diagrams, and accreditation artifacts.
• Evaluate the impact of system modifications and changes, documenting security implications and ensuring updates align with DHA Change Management procedures.
• Provide timely reporting of security incidents and violations, escalating findings through DHA’s established IA reporting chain.
• Collaborate with engineering, administration, and operations teams to integrate IA requirements into system lifecycle activities.
• Develop weekly and ad-hoc vulnerability scan reports; POAandMs for unremediated vulnerabilities;
  Risk Assessment packages and security accreditation documentation; eMASS entries, updates, and compliance validation records;
  Incident reports and corrective action documentation.

Entry level;
Full-time;
Other, Information Technology, and Management; IT Services and IT Consulting

Other, Information Technology, and Management

IT Services and IT Consulting