DHS Security Control Assessor III

We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO & paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at: https://www.onezerollc.com/careers/

Position Title: DHS Security Control Assessor III

Location: NCR

Clearance: TS/SCI

OneZero Solutions is on contract to provide division-wide support for Federal Information Security Modernization Act (FISMA) compliance, execution of the Risk Management Framework (RMF) process to achieve and maintain Authority to Operate (ATO) security authorizations, and deliver cyber security compliance for DHS operational mission systems. We are looking for personnel to support our DHS customer in achieving its mission of providing division-wide cyber security support for operational mission systems and assisting programs as they navigate the ATO process. The result of these efforts will be that the systems meet all the requirements for ATO approval before they are officially submitted to the Office of Chief Information Officer (OCIO).

Qualified Parking Allowance: Employer may provide a monthly stipend or cover the cost of parking for employees who commute to government site by car.

Job Summary

• Conduct independent assessments of the management, operational, and technical security controls employed within various DHS systems and networks.
• Evaluate the effectiveness of implemented controls in mitigating identified risks and protecting sensitive data and systems.
• Identify and document control deficiencies, vulnerabilities, and non-compliance with security policies, regulations, and prescribed hardening guidelines.
• Develop and present clear and concise findings and recommendations to stakeholders and decision-makers.
• Support the implementation of corrective actions to address identified deficiencies and improve overall security posture.
• Stay current with emerging security threats, vulnerabilities, and federal and industry best practices, standards, and policies for employed IT and its continued compliance within DHS.
• Contribute to the development and continual refinement of internal security assessment methodologies and procedures.

Qualifications:

• 10+ years of direct experience serving as a Security Control Assessor (SCA) within the DoD/Federal Government.
• Experience within the Intelligence Community and Law Enforcement is a strong plus.
• Demonstrated expertise in various security control frameworks and methodologies, including NIST SP 800-53, FISMA, RMF, DISA STIGs, and DHS supplemental IA controls.
• Proficiency in conducting security assessments, utilizing tools and techniques for vulnerability scanning, penetration testing, and configuration review.
• Strong understanding of information security principles and best practices, including network security, system security, encryption, and incident response.
• Experience with OpenRMF is a strong plus.
• Excellent analytical and problem-solving skills.
• Exceptional written and verbal communication skills.
• Ability to work independently and as part of a team.

Education

Bachelor's degree and/or CRISC, GISP, CASP, CISSP, or other advanced security-related certifications

Additional relevant experience may be considered in lieu of a degree.

OneZero Solutions, LLC is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

If you are a qualified ind