RemoteLeaf Logo
Log in Sign up

Security Controls Assessor (SCA) - Journeyman

21 hours, 10 minutes ago
United States
Full-time
Senior
Security Analyst
Cybersecurity
AWS Azure Cybersecurity GCP Penetration Testing
Apply Now
Avint

Avint

Avint, LLC provides transformational cybersecurity solutions to federal agencies and commercial organizations, optimizing security investments with a holistic strategy.

IT Services
11-50
Founded 2018
View All Jobs 4

Description

  • Conduct security control assessments of information systems using interview, examination, and testing methods.
  • Verify compliance with applicable security and regulatory frameworks, including NIST SP 800-37, NIST SP 800-53, NIST SP 800-171, FISMA, and FedRAMP.
  • Analyze system architectures, network diagrams, configuration settings, and policies to identify vulnerabilities and compliance gaps.
  • Review vulnerability scanning results and penetration testing reports to validate technical controls.
  • Document testing results and draft sections of the Security Assessment Report (SAR).
  • Present assessment findings and risk posture to Authorizing Officials, system owners, and other stakeholders.
  • Assist system owners in developing Plans of Action and Milestones (POA&M) to remediate deficiencies.
  • Collaborate with the Risk Management team to support continuous monitoring efforts.
  • Stay current on emerging cyber threats, vulnerabilities, regulatory changes, and assessment techniques.
  • Participate in the development and refinement of enterprise information security policies, standards, and guidelines.

Requirements

  • Bachelor’s degree in a related field or equivalent professional experience.
  • Security+ certification or higher.
  • 6–8 years of dedicated experience in cybersecurity, information assurance, or IT auditing.
  • At least 6 years of hands-on security controls assessment experience for systems of moderate complexity (C2 and C3), with ability to support C4 assessments.
  • Must be a U.S. citizen with no dual citizenship.
  • Ability to pass a background investigation.
  • Ability to obtain and maintain DHS Suitability/Entry on Duty (EOD).
  • Strong attention to detail and organized documentation habits.
  • Good analytical and troubleshooting abilities.
  • Professional verbal and written communication skills with the ability to collaborate across technical boundaries.
  • Solid working knowledge of NIST SP 800-53, NIST SP 800-37, and NIST SP 800-171.
  • Familiarity with cloud security concepts across AWS, Azure, and Google Cloud, and with FedRAMP.
  • Knowledge of operating system security, network protocols, access control mechanisms, and vulnerability management tools.

Benefits

  • Competitive salary ranging from $104,000 to $119,000.
  • Full health insurance.
  • Generous time off.
  • Observation of federal holidays.
  • Reimbursement for courses, exams, and tuition.
  • Professional development support for classes, conferences, programs, and degrees.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Mercier Consultancy

German Speaking Fraud Investigator | Relocate to Sofia, Bulgaria

Mercier Consultancy Professional Services

German-speaking Fraud Investigator role in Sofia, Bulgaria, supporting an international team to review suspicious activity, investigate potential fraud, and protect customers and businesses from financial risk.

Greece Austria Belgium Bulgaria Germany Cyprus Full-time Entry Level Security Analyst
21 hours, 10 minutes ago
Prevail Partners

Surveillance Officer

Prevail Partners 11-50 Professional Services

Prevail Partners is seeking experienced Surveillance Officers to support an Ultra High Net Worth client through discreet protective surveillance operations within a specialist security programme.

United Kingdom Contract Senior Security Analyst
21 hours, 40 minutes ago
True Zero Technologies

RMF Process Specialist (R-00181)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking an RMF Process Specialist to support the development, documentation, standardization, and governance of Risk Management Framework processes across the organization.

Anywhere Full-time Mid Level Security Analyst Technical Writer
Cybersecurity Git
21 hours, 40 minutes ago
ENSCO, Inc.

Senior Signals Analyst

ENSCO, Inc. 501-1000 information technology & services

ENSCO is seeking a Senior Signals Intelligence (SIGINT) Analyst to support the U.S. Army Space and Missile Defense Command Intelligence Directorate on space and missile defense missions.

United States Full-time Senior Security Analyst
$135k-$165k
1 day, 21 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers