SCA-R NSS

Gray Tier Technologies, LLC • Springfield, VA, US • 1m ago

Gray Tier Technologies is seeking a Security Control Assessor

Primary Responsibilities

Execute in-depth security control assessments (SCAs) for National Security Systems (NSS) in compliance with NIST RMF and CNSS policy, ensuring the highest level of system security.
Develop and maintain formal documentation, including NSS-specific SOPs and Concept of Operations (CONOPs), to streamline and enhance the authorization process.
Analyze cyber risk indicators stemming from system threats and vulnerabilities and provide detailed cybersecurity risk recommendations in support of NSS continuous monitoring activities.
Research, develop, and implement policies to improve the effectiveness and efficiency of the security authorization process while minimizing operational impacts on critical NSS systems.
Conduct vulnerability scans, create Body of Evidence (BoE) artifacts, and produce Security Assessment Reports (SARs) to document risk levels and recommended mitigations.
Provide in-depth analysis of cyber threat actor behavior and create detailed white papers to inform DHS NSS of potential risks and threat trends.
Actively participate in security meetings, including engineering review boards and cybersecurity supply chain risk management (C-SCRM) sessions, to inform and support NSS initiatives.
Develop automated assessment tools and dashboards to support continuous monitoring and ongoing authorization processes, leveraging tools like Splunk, Tenable, and Axonius.

Basic Qualifications

Bachelor's Degree in Information Technology, Cybersecurity, or a related technical field (or equivalent experience) AND 4+ years experience OR AS/AA with 6+ years experience OR HS/GED with 8+ years experience
Expertise in NIST RMF and CNSS policy frameworks, with the ability to apply them to secure National Security Systems.
Strong background in cybersecurity risk analysis and reporting, with experience in creating detailed BoE artifacts.
Proficiency in using cybersecurity tools for vulnerability scanning and continuous monitoring.
Local to D.C. or Virginia with ability to work on-site for classified work.

Preferred Qualifications

Expertise in conducting SCAs and cybersecurity assessments for NSS in accordance with NIST RMF and CNSS guidelines.
Extensive knowledge of risk management and mitigation techniques tailored to high-security environments, such as those encountered in NSS.
Experience developing and maintaining cybersecurity SOPs and CONOPs, with a focus on streamlining the risk assessment and authorization process.
Proficiency in using vulnerability assessment tools such as Nessus, Splunk, and AppDetective, along with MGMT compliance tools like CSAM-S.
Strong analytical skills to assess cyber threats, identify trends, and create actionable risk mitigation strategies through continuous monitoring.
Adept at creating Body of Evidence (BoE) artifacts, security reports, and other documentation required for high-risk systems.
Demonstrated ability to lead cross-functional teams in high-security environments and collaborate with government leads and stakeholders.
Certifications such as CISSP, CEH, GPEN, or CNSS-related credentials.
In-depth knowledge of supply chain risk management and its impact on national security.
Experience with federal cybersecurity policies, including DHS 4300B.
Hands-on experience developing cybersecurity risk assessments and strategies in classified environments.
Familiarity with emerging cybersecurity threats and trends impacting NSS systems

Clearance Required

Must be able to obtain and maintain an DHS Entry on Duty (EOD) clearance and hold an active Top Secret clearance with SCI eligibility.

Related Jobs

Cyber Defense Forensics Analyst

EY • Washington, DC, US • 2h ago

2h ago

Part-time sitter required for two boys near the George Washington University

Wyndy • Washington, DC, US • 4h ago

4h ago

Information Technology System Administrator

REDLattice, Inc. • Chantilly, VA, US • 11h ago

11h ago

Cyber Defense Incident Responder

GovCIO • Washington, DC, US • 16h ago

16h ago

System Administrator

Insight Global • Washington, DC, US • $45 - $60 / hour • 1d ago

1d ago

Lead Solutions Architect - Python, Azure

Mindlance • Washington, DC, US • $80 - $85 / hour • 1d ago

1d ago

Red Cell Analyst

Amentum • Fort Belvoir, VA, US • 1d ago

1d ago

Net/Sys Admin III - Network/System Administrator

Watermark Risk Management International, LLC • Washington, DC, US • 1d ago

1d ago

Certified CMMC Assessor

Apicem Partners • Remote (Washington, DC, US) • 1d ago

1d ago

Senior Cloud Infrastructure Architect

Oteemo Inc. • Manassas, VA, US • 1d ago

1d ago