DHS Security Control Assessor III

DHS Security Control Assessor III Location

NCR

TS/SCI

One Zero Solutions is on contract to provide division-wide support for Federal Information Security Modernization Act (FISMA) compliance, execution of the Risk Management Framework (RMF) process to achieve and maintain Authority to Operate (ATO) security authorizations, and deliver cyber security compliance for DHS operational mission systems.

Employer may provide a monthly stipend or cover the cost of parking for employees who commute to a government site by car.

• Conduct independent assessments of the management, operational, and technical security controls employed within various DHS systems and networks.
• Evaluate the effectiveness of implemented controls in mitigating identified risks and protecting sensitive data and systems.
• Identify and document control deficiencies, vulnerabilities, and non‑compliance with security policies, regulations, and prescribed hardening guidelines.
• Develop and present clear and concise findings and recommendations to stakeholders and decision‑makers.
• Support the implementation of corrective actions to address identified deficiencies and improve overall security posture.
• Stay current with emerging security threats, vulnerabilities, and federal and industry best practices, standards, and policies for employed IT and its continued compliance within DHS.
• Contribute to the development and continual refinement of internal security assessment methodologies and procedures.

• 10+ years of direct experience serving as a Security Control Assessor (SCA) within the DoD/Federal Government.
• Experience with in the Intelligence Community and Law Enforcement is a strong plus.
• Demonstrated expertise in various security control frameworks and methodologies, including NIST SP 800‑53, FISMA, RMF, DISA STIGs, and DHS supplemental IA controls.
• Proficiency in conducting security assessments, utilizing tools and techniques for vulnerability scanning, penetration testing, and configuration review.
• Strong understanding of information security principles and best practices, including network security, system security, encryption, and incident response.
• Experience with OpenRMF is a strong plus.
• Excellent analytical and problem‑solving skills.
• Exceptional written and verbal communication skills.
• Ability to work independently and as part of a team.

Bachelor's degree and/or CRISC, GISP, CASP, CISSP, or other advanced security‑related certifications.

Additional relevant experience may be considered in lieu of a degree.

One Zero Solutions, LLC is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access  as a result of your disability.

To request an accommodation, please contact us at  or call (202) 987‑2580.