Apply on Employer Site

BEAT · 4 months ago

Security Control Assessor

SAN ANTONIO, TX, US

Full-time

Onsite

Mid Level

BEAT is a company focused on cybersecurity and information assurance. They are seeking a Security Control Assessor to provide enterprise-level cybersecurity compliance and assurance support, ensuring that systems meet DoD security requirements through continuous monitoring and vulnerability assessments.

Cyber SecurityInformation TechnologyRetailSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Conduct vulnerability scans and security control assessments to validate compliance with DoD and DHA cybersecurity policies, STIGs, and IAVM directives

Maintain and validate asset inventories within ACAS and eMASS, ensuring all enterprise assets are credentialed, scanned, and reported accurately

Develop and maintain Plan of Action and Milestones (POA&Ms) for identified vulnerabilities, providing remediation strategies and tracking progress through closure

Support the IS accreditation process by preparing risk assessment packages, security documentation, boundary diagrams, and accreditation artifacts

Evaluate the impact of system modifications and changes, documenting security implications and ensuring updates align with DHA Change Management procedures

Provide timely reporting of security incidents and violations, escalating findings through DHA’s established IA reporting chain

Collaborate with engineering, administration, and operations teams to integrate IA requirements into system lifecycle activities

Develops: Weekly and ad-hoc vulnerability scan reports; POA&Ms for unremediated vulnerabilities; Risk Assessment packages and security accreditation documentation; eMASS entries, updates, and compliance validation records; Incident reports and corrective action documentation

Qualification

CybersecurityRisk Management FrameworkVulnerability AssessmentInformation AssuranceSecurity DocumentationAsset Inventory ManagementIncident ReportingCollaborationCommunicationProblem SolvingAttention to Detail

Required

BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science or military Training or CGRC/CAP or CASP+ or Cloud+ or PenTest+ or Security+ or GSEC, CISSP

Microsoft Certified: Azure Administrator Associate or Microsoft Certified: Windows Server Hybrid Administrator Associate