Imagineeer · 1 day ago
SME Security Control Assessor
Arlington, VA 22202
Full-time
Hybrid
Entry Level
2+ years expImagineeer is seeking a SME Security Control Assessor to support security control assessment activities for HHS-ACF information systems. The role involves applying NIST security controls to evaluate control implementation, conducting security testing, and contributing to the development of assessment reports and documentation.
Computer Software
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Support security control assessment activities
Gather and organize assessment evidence
Document security control implementation
Conduct security testing and evaluations
Assist with vulnerability scans and analysis
Create of assessment reports and briefings
Maintain assessment documentation and tracking sheets
Lead security control interviews
Prepare assessment deliverables
Applying NIST security controls and frameworks
Support continuous monitoring activities
Assist with security documentation review
Contribute to Plans of Action and Milestones (POA&Ms) development
Participate in team meetings and technical discussions
Qualification
Required
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field
2+ years of experience in security control assessments
Basic understanding of cybersecurity principles and concepts
Knowledge of NIST frameworks and security controls
Familiarity with common security tools and technologies
Strong attention to detail
Excellent organizational skills
Basic technical writing abilities
Proficiency in Microsoft Office suite
Strong analytical and problem-solving skills
Ability to follow detailed instructions and procedures
Good communication skills
Eagerness to learn and develop professional skills
Basic understanding of networking concepts
Ability to work effectively in a team environment
Commitment to maintaining confidentiality and security protocols
Familiarity with Risk Management Framework (RMF)
Preferred
Security+ certification or in progress
Basic understanding of FISMA requirements
Experience with vulnerability scanning tools
Knowledge of basic scripting or programming
Familiarity with cloud computing concepts
Understanding of basic system administration
Experience with documentation management systems
Knowledge of compliance frameworks
Basic understanding of security assessment methodologies
Familiarity with cybersecurity best practices
Experience with technical documentation
Interest in federal government cybersecurity
Basic understanding of privacy principles
Benefits
Competitive salary
Company
Imagineeer
We engage, empower, enable, and imagine a future where the patient, consumer, customer, and business is the center of everything you do.
2-10 employees
Funding
Current Stage
Early StageCompany data provided by crunchbase