Overview
Peregrine is a pioneer within the cybersecurity industrial control systems and the Internet of Things, supporting many federal and commercial customers. Peregrine's experienced staff knows the cybersecurity and operational technology environment and provides these capabilities for our customers daily.
Summary:
The Security Control Assessor - Representative will perform a risk-based review and evaluation A&A process for classified systems to evaluate system security plans (SSPs) leading to an authorization decision.
Responsibilities
Essential Job Functions:
- Maintain expert-level knowledge of all NIST 800-53 Security Controls
- Maintain working knowledge of DoD, DCSA, and NIST RMF guidance and policies
- Perform SSP reviews in accordance with the plan
- Use critical thinking to aid decision-making and highlight paths that will help achieve desired outcomes during risk-based analysis
- Assess SSPs, document the findings, and make recommendations.
- Review and evaluate A&A artifacts in submission documentation.
- Provide information security services such as system security documentation evaluation and other support activities connected with the implementation of the Risk Management Framework (RMF)
- Evaluate system security package submissions for authorization of classified systems against defined DCSA and Government technical standards.
- Acquire and maintain NISP eMASS account for daily use
- Attend and participate in training on the NISP eMASS tool
- Be familiar with the NIST RMF and be able to process and track packages through the NISP Enterprise Mission Assurance Support Service (eMASS).
- Use NISP eMASS as an approved repository for artifacts and Plans of Action and Milestones (POA&M)
- Provide written documentation for each SSP review that includes:
- A summary of actions taken as part of the review, including dates and names when applicable
- Quantitative measurements that capture and evaluate communications and information technology support, identify trends, and measure performance relative to SSP reviews
- Analysis of the review
- Clear rationale for outcomes and defensible recommendations
- Sufficient information to enable the Government to assess and authorize decisions
Qualifications
Necessary Skills and Knowledge:
- Proficiency in Microsoft Office Suite
- Solid client service, time management and leadership skills as well as written and verbal communication skills
Minimum Qualifications:
- BA or BS degree in Information Technology or Engineering preferred
- Cybersecurity experience
- Certified at IAT Level II (CCNA Security, CSA+, GICSP, GSEC, Security+ CE, SSCP)
- Approved personnel with Secret clearance
- Pass an employer background check
- Must be a U.S. Citizen
Preferred Qualifications:
- Certified IAT Level III (CISSP, CASP)
- Experience with DoD RMF
Pay and Benefits
The annual salary range for this position is $80,000 to $104,000.
At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.
Essential Job Functions:
- Maintain expert-level knowledge of all NIST 800-53 Security Controls
- Maintain working knowledge of DoD, DCSA, and NIST RMF guidance and policies
- Perform SSP reviews in accordance with the plan
- Use critical thinking to aid decision-making and highlight paths that will help achieve desired outcomes during risk-based analysis
- Assess SSPs, document the findings, and make recommendations.
- Review and evaluate A&A artifacts in submission documentation.
- Provide information security services such as system security documentation evaluation and other support activities connected with the implementation of the Risk Management Framework (RMF)
- Evaluate system security package submissions for authorization of classified systems against defined DCSA and Government technical standards.
- Acquire and maintain NISP eMASS account for daily use
- Attend and participate in training on the NISP eMASS tool
- Be familiar with the NIST RMF and be able to process and track packages through the NISP Enterprise Mission Assurance Support Service (eMASS).
- Use NISP eMASS as an approved repository for artifacts and Plans of Action and Milestones (POA&M)
- Provide written documentation for each SSP review that includes:
- A summary of actions taken as part of the review, including dates and names when applicable
- Quantitative measurements that capture and evaluate communications and information technology support, identify trends, and measure performance relative to SSP reviews
- Analysis of the review
- Clear rationale for outcomes and defensible recommendations
- Sufficient information to enable the Government to assess and authorize decisions
Necessary Skills and Knowledge:
- Proficiency in Microsoft Office Suite
- Solid client service, time management and leadership skills as well as written and verbal communication skills
Minimum Qualifications:
- BA or BS degree in Information Technology or Engineering preferred
- Cybersecurity experience
- Certified at IAT Level II (CCNA Security, CSA+, GICSP, GSEC, Security+ CE, SSCP)
- Approved personnel with Secret clearance
- Pass an employer background check
- Must be a U.S. Citizen
Preferred Qualifications:
- Certified IAT Level III (CISSP, CASP)
- Experience with DoD RMF
Pay and Benefits
The annual salary range for this position is $80,000 to $104,000.
At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.