Security & Safety|Security,Security & Safety,Education|Education Assessor,Education Jobs

Security Control Assessor Representative (SCA-R)
Alexandria, VA or Ft. Meade, MD
Pay From: $100,000 per year

MUST:
Security Control Assessor Representative (SCA-R)
TS/SCI
Current DoD 8570 IAM Level III certification.
8) years of experience in a cybersecurity or network security position.
(5) years of experience performing Certification and Accreditation (C&A) and/or Assessment and Authorization (A&A) activities.
Bachelor's degree required.
A bachelor's in information technology, Cybersecurity, Computer Science, Information Systems, or related technical field is preferred.

DUTIES:
The Security Control Assessor Representative (SCA-R) provides cybersecurity assessment, Risk Management Framework (RMF), and Assessment and Authorization (A&A) support for Department of Defense (DoD) information systems.
The SCA-R works with Information System Security Managers (ISSMs), Program Management Offices (PMOs), system owners, technical teams, and Government cybersecurity stakeholders to assess security controls, identify cybersecurity risks, validate system compliance, and support authorization decisions throughout the system lifecycle.
The SCA-R performs independent technical and risk-based assessments using Government-approved processes, databases, and cybersecurity tools and develops complete, accurate, and defensible authorization documentation for Government and Authorizing Official (AO) review.
Use Government-assigned tools and databases to perform weekly updates, maintain system records, track assigned actions, and complete cybersecurity assessment and authorization activities.
Coordinate with ISSMs, PMOs, system owners, and technical stakeholders to understand system architectures, security requirements, authorization boundaries, configurations, and system changes.
Conduct risk analysis, security control assessment, and authorization activities across applicable RMF steps using approved RE5 tools and processes.
Verify system authorization boundaries and validate system security categorizations in accordance with FIPS 199 and applicable DoD requirements.
Identify applicable data classifications and conduct system-level cybersecurity risk assessments.
Assess threats, vulnerabilities, control deficiencies, and residual risks and compile findings into complete and accurate authorization packages.
Evaluate proposed and implemented system changes, determine their potential security and authorization impacts, and provide appropriate status and risk information to the Authorizing Official (AO).
Evaluate authorization and change requests, including web-filtering requests, firewall exceptions, ports and protocols, cybersecurity risks, STIG/SRG compliance, and on-site security requirements.
Review and validate compliance with applicable Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), security controls, and cybersecurity requirements.
Review, validate, and track Plans of Action and Milestones (POA&Ms) and associated cybersecurity deficiencies through resolution.
Lead and support on-site assessment visits, including planning, technical assessments, stakeholder coordination, entrance/exit briefings, documentation, findings development, and reporting.
Maintain access to and proficiency with required Government cybersecurity databases, vulnerability assessment platforms, endpoint security solutions, scanning tools, and RMF management systems.
Attend required Government meetings, technical exchanges, and training to remain current with policies, procedures, tools, and RMF process changes.
Complete required assessor, vulnerability scanning, endpoint security, and RMF process training.
Support assigned systems throughout their lifecycle in accordance with FISMA, DoD RMF, and applicable cybersecurity requirements.
Prepare and submit weekly activity reports documenting completed and ongoing activities, tracking identifiers, assessment status, significant findings, risks, issues, and key updates.
Independently assess security control deficiencies and residual risks, evaluate alternative corrective actions, and recommend risk-based remediation priorities.
Advise the Authorizing Official and Government cybersecurity stakeholders on the security risks and operational implications of system changes, exception requests, and authorization decisions. Quadrant is an affirmative action/equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, status as a protected veteran, or status as an individual with a disability. Healthcare benefits are offered to all eligible employees according to compliance mandated by the Affordable Care Act .

Clearance: Active TS/SCI eligibility required, plus Special Access Program (SAP) access eligibility and willingness for Counterintelligence polygraph Industry: Public Sector/Government (DoD/Air Force support)
Job Location:

• Colorado Springs, CO
• Arlington, VA
• Crystal City, VA

Key Responsibilities:

• Conduct comprehensive assessments of management, operational, and technical security controls for information systems (IS) using Risk Management Framework (RMF) and Joint SAP Implementation Guide (JSIG).
• Evaluate IS threats, vulnerabilities, and impacts on Confidentiality, Integrity, and Availability to recommend safeguards and corrective actions.
• Prepare Security Assessment Reports (SAR), initiate Plans of Action and Milestones (POA&M), and provide written recommendations for security authorization to Authorizing Officials (AO/DAO).
• Advise Information System Owners (ISO), Information Data Owners (IDO), Program Security Officers (PSO), and officials on assessment, authorization, and compliance issues.
• Review and evaluate authorization packages, proposed changes to operating environments, hardware/software impacts, and Continuous Monitoring Plans.
• Ensure compliance with sanitization procedures, assist with inspections, security incidents, and all phases of the system development life cycle (SDLC).
• Perform oversight of IS security program policy, with emphasis on SAP network infrastructure integration.
• Represent the organization on inspection teams.

Required Qualifications:

• Bachelor's degree in a related field or equivalent experience (4+ years).
• 5-7 years of related experience, including at least 3 years in SAP, SCI, or Collateral IS Security with hands-on implementation of relevant regulations.
• Prior experience as Information Systems Security Officer (ISSO) and/or Information Systems Security Manager (ISSM).
• Meet DoD Directive 8570.01-M certification requirements for Information Assurance Technician Level III or Information Assurance Manager Level I within 6 months of hire.
• Native or bilingual proficiency in English.
• Eligible for TS/SCI and SAP access.

Mission Context

LV8D Solutions supports national security space and intelligence customers delivering next-generation sensing and exploitation capabilities. The role of a Security Control Assessor (SCA) is focused on providing information security Assessment and Authorization (A&A) support throughout the mission program’s lifecycle.

Position Overview

LV8D Solutions is seeking a SCA* to conduct independent assessments of the management, operational, and technical security controls employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the security controls. A Security Control Assessor (SCA) performs comprehensive INFOSEC assessment of management, operational, and technical security controls to determine overall effectiveness of the controls for A&A determination throughout a program's system lifecycle. SCAs provide an assessment of the severity of weakness or deficiencies discovered in the Information System (IS) and its environment of operation and recommend corrective actions to address identified vulnerabilities. Prior to initiating the security control assessment, the SCA reviews the System Security Plan (SSP) to ensure the plan provides a set of security controls for the ISs that meet the stated security requirements. Additionally, the SCA must verify that all allocated controls have an acceptable status (i.e., implemented, excepted, or inherited) with appropriate documented details and provides responses in the Government's Risk Management Framework (RMF) tools.

Interested candidates need to thrive in an innovative, fast-paced environment; are highly motivated and not afraid to take on uncharted territory; possess strong communication, leadership, and organizational skills; and be able to prioritize their time to be effective in a dynamic environment.

Requirements

Key Responsibilities

• Reviews IS for compliance with applicable Intelligence Community (IC), Department of War (DoW), and National Directorate (ND) guidance, and make recommendations to the Government.
• Provides ISs security advice and guidance Joint Analytical Workstation (JAW) applicable IC, DoW, and NDs and guidance to Government and industry partners for the protection of data at all classification levels including Sensitive Compartmented Information (SCI).
• Evaluates threats and vulnerabilities to ISs to ascertain the need for additional safeguards and recommend approval, disapproval, or waiver(s) for IS processing national security data at industry and/or Government facilities.
• Supports development and implementation of directives and guidance for policies.
• Provides input for consideration in the promulgation of future ISs security policy.
• Supports and/or conduct site visits and assessments to inspect and verify IS reports.
• Ensures security control assessments are completed for each IS.
• Supports the preparation and delivery of presentations, briefings, reports, and memoranda associated with the RMF process.
• Uses the RMF system of record to complete RMF workflow duties and maintain the asset documentation repository.
• Establishes and maintains means and methods to track RMF process workflow activities to inform task volume, velocity, and duration of activities.
• Prepares the final Security Assessment Report (SAR) containing the results and findings from the assessment at the conclusion of each security control assessment activity and the Authorization Recommendation.
• Ensures appropriate IS security requirements including applicable Interface Control Documents (ICDs), DoW Instructions, NDs and other guidance are addressed and applied and appropriate documentation is prepared by the system owners or programs. The documentation will be contained in the Security Assessment Package, including, but not limited to, the Concept of Operations (CONOP), SSP, Systems Requirements Traceability Matrix, Risk Management Matrix, Test Results, interface control documents, requests for changes, test plans, and other related program security documentation.
• Collaborates with Information Security Officers (ISOs) and Common Control Providers to initiate Plan of Action and Milestones (POAMs) for ISs based on findings and recommendations from the SAR.
• Reviews and approves the IS Security Assessment Plan which is comprised of the Security Controls Traceability Matrix and the Security Control Assessment Procedures.
• Tracks the completion of the SAR.
• Reviews, coordinates, and responds to security issues as requested by the Government.
• Provides A&A support to the Government for the protection of special programs and tactical operations related activities.
• Supplies the effort needed to conduct the reviews and write reports to support Integrated Security Assessment Program (ISAP) or Technical Information Systems Security Reviews (TISSRs).

Required Qualifications

• Practical experience performing information systems A&A as defined in applicable ICDs and guidance
• Practical experience utilizing risk management strategies for information technology solutions
• Technical understanding of emerging technologies and their implementation within Government system and network environments
• Knowledge of information technology concepts used in the evaluation of security performance and integrity of state-of-the-art applications, communications systems, hardware, software, satellite control systems, and information processing systems
• Technical understanding of information technology systems, software, and networks
• Ability to effectively coordinate A&A activities of industry and Government information systems to meet acquisition milestone requirements
• Effective technical report and general correspondence writing ability 
• Ability to manage and track systems or programs involved in the A&A process
• Experience developing and implementing security related directives and guidance for Information Assurance, Information Technology, and Information Management
• Experience working with a mixed level skill team to ensure that appropriate knowledge and skill transfer occurs
• High school’s degree and 7+ years of relevant experience, or
• Associate’s degree and 7+ years of relevant experience, or
• Bachelor’s degree and 5+ years of relevant experience, or
• Master’s degree and 3+ years of relevant experience

Certifications

Must have one of the following IAM Level 2 Certification:

• CGRC (Previously CAP)
• CASP
• CISM
• CISSP
• GSLC
• CCISO

Security Requirements

• U.S. Citizenship
• Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance
• Active Counterintelligence (CI) or Full Scope (FS) Polygraph

 Work Environment

• On-site work in a government or contractor facility 
• Occasional travel (up to 10%) 

*This position is dependent on a contract seat being awarded.

About LV8D Solutions

LV8D Solutions is an elite Systems Engineering and Technical Advisory (SETA) company that delivers advanced systems engineering, integration, acquisition, mission operations, network communications, and cybersecurity support to our defense and intelligence customers. Founded in 2019, we apply our deep technical expertise, understanding, and mission-first mindset to design, acquire, and implement complex, high-impact solutions for our Intelligence Community (IC) and Department of War (DoW) customers. We specialize in every aspect of our customers’ space and ground mission systems while offering exceptional work-life balance and an exemplary compensation and total rewards package designed to recruit, train, and retain top talent and committed to national defense and career growth.

Equal Employment Opportunity Statement

LV8D Solutions LLC is an Equal Opportunity Employer committed to diversity and inclusion. All qualified applicants will receive consideration without regard to race, religion, gender, national origin, disability, veteran status, or other protected categories.

Benefits

Performance & Recognition

Period of Performance (PoP) Bonus Opportunities
Performance-based bonus opportunities tied to contract or organizational performance.

Retention Incentive Benefit Bounty
Receive a payout for unused annual company contributions designated for health insurance premiums and professional training.

Referral Bonus
Earn up to $5,000 for each successful employee referral.

Customer Recognition Letter of Appreciation (LoA) Bonus Opportunities
Bonus opportunities based on customer recognition received through Letters of Appreciation.

Milestone Rewards
Celebrate your career achievements with anniversary awards on your 1st, 5th, 10th, and 20th years of service.

Financial & Retirement Benefits

Profit Sharing
Receive an annual contribution equal to 4% of your W-2 gross earnings into your 401 (k), with immediate vesting.

401(k) Company Match
The company matches your 401 (k) contributions dollar-for-dollar up to 6% of your monthly contribution, with immediate vesting.

Career Development

The company invests in your professional growth through:

• Annual financial support for professional training and industry certifications.
• Enhanced financial support for employees actively pursuing a degree at an accredited institution.

Work-Life Balance

Support for a healthy work-life balance includes:

• Flexible work hours
• Competitive paid time off (PTO)
• Company holidays

Health & Wellness Benefits

The company offers a comprehensive benefits package designed to support you and your family.

Medical Coverage

Three comprehensive Medical/Rx insurance plan options to meet the unique and individualized benefit needs of our employees

Dental & Vision

• Comprehensive dental insurance for employees and eligible dependents.
• Comprehensive vision insurance for employees and eligible dependents.

Income Protection

• 100% Company-Paid Short-Term Disability Insurance
• 100% Company-Paid Long-Term Disability Insurance

Life Insurance

• 100% Company-Paid Basic Term Life Insurance with Accidental Death & Dismemberment (AD&D) coverage.
• Optional employee-paid Supplemental Voluntary Life Insurance.