Security Controls Assessor

(U) Security Controls Assessor (Senior) (U) Functions
• (U) Conducts verification and validation for security compliance of all information systems, products, and components
• (U) Analyzes design specifications, design documentation, configuration practices and procedures, and operational practices and procedures
• (U) Provides identification of non-compliance of security requirements and possible mitigations to requirements that are not in compliance
• (U) Conducts on-site evaluations
• (U) Validates the security requirements of the information system
• (U) Verifies and validates that the system meets the security requirements
• (U) Provides vulnerability assessment of the system
• (U) Coordinates penetration testing
• (U) Provides a comprehensive verification and validation report (certification report) for the information system
• (U) Provides process improvement recommendations
• (U) Assists the Government to draft standards and guidelines for usage (U) Education and Experience
• (U) Twelve years of related work experience
• (U) A Bachelor's Degree in Computer Science or IT Engineering may be substituted for four years of experience
• (U) Experience in security or system engineering in five or more areas, including: telecommunications concepts, operating systems, databases/DBMS, middleware, applications, web-servers, SANS/Netaps, Active Directory, firewalls, and controlled interfaces
• (U) This is a CWIP Billet per DoD Directive 8570-1 and must meet specified certification requirements defined and documented by the TTO COR.