Security Control Assessor (SCA) bei LV8D Solutions

Description

Mission Context

LV8D Solutions supports national security space and intelligence customers delivering next-generation sensing and exploitation capabilities. The role of a Security Control Assessor (SCA) is focused on providing information security Assessment and Authorization (A&A) support throughout the mission program’s lifecycle.

Position Overview

LV8D Solutions is seeking a SCA* to conduct independent assessments of the management, operational, and technical security controls employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the security controls. A Security Control Assessor (SCA) performs comprehensive INFOSEC assessment of management, operational, and technical security controls to determine overall effectiveness of the controls for A&A determination throughout a program's system lifecycle. SCAs provide an assessment of the severity of weakness or deficiencies discovered in the Information System (IS) and its environment of operation and recommend corrective actions to address identified vulnerabilities. Prior to initiating the security control assessment, the SCA reviews the System Security Plan (SSP) to ensure the plan provides a set of security controls for the ISs that meet the stated security requirements. Additionally, the SCA must verify that all allocated controls have an acceptable status (i.e., implemented, excepted, or inherited) with appropriate documented details and provides responses in the Government's Risk Management Framework (RMF) tools.

Interested candidates need to thrive in an innovative, fast-paced environment; are highly motivated and not afraid to take on uncharted territory; possess strong communication, leadership, and organizational skills; and be able to prioritize their time to be effective in a dynamic environment.

Requirements

Key Responsibilities

• Reviews IS for compliance with applicable Intelligence Community (IC), Department of War (DoW), and National Directorate (ND) guidance, and make recommendations to the Government.
• Provides ISs security advice and guidance Joint Analytical Workstation (JAW) applicable IC, DoW, and NDs and guidance to Government and industry partners for the protection of data at all classification levels including Sensitive Compartmented Information (SCI).
• Evaluates threats and vulnerabilities to ISs to ascertain the need for additional safeguards and recommend approval, disapproval, or waiver(s) for IS processing national security data at industry and/or Government facilities.
• Supports development and implementation of directives and guidance for policies.
• Provides input for consideration in the promulgation of future ISs security policy.
• Supports and/or conduct site visits and assessments to inspect and verify IS reports.
• Ensures security control assessments are completed for each IS.
• Supports the preparation and delivery of presentations, briefings, reports, and memoranda associated with the RMF process.
• Uses the RMF system of record to complete RMF workflow duties and maintain the asset documentation repository.
• Establishes and maintains means and methods to track RMF process workflow activities to inform task volume, velocity, and duration of activities.
• Prepares the final Security Assessment Report (SAR) containing the results and findings from the assessment at the conclusion of each security control assessment activity and the Authorization Recommendation.
• Ensures appropriate IS security requirements including applicable Interface Control Documents (ICDs), DoW Instructions, NDs and other guidance are addressed and applied and appropriate documentation is prepared by the system owners or programs. The documentation will be contained in the Security Assessment Package, including, but not limited to, the Concept of Operations (CONOP), SSP, Systems Requirements Traceability Matrix, Risk Management Matrix, Test Results, interface control documents, requests for changes, test plans, and other related program security documentation.
• Collaborates with Information Security Officers (ISOs) and Common Control Providers to initiate Plan of Action and Milestones (POAMs) for ISs based on findings and recommendations from the SAR.
• Reviews and approves the IS Security Assessment Plan which is comprised of the Security Controls Traceability Matrix and the Security Control Assessment Procedures.
• Tracks the completion of the SAR.
• Reviews, coordinates, and responds to security issues as requested by the Government.
• Provides A&A support to the Government for the protection of special programs and tactical operations related activities.
• Supplies the effort needed to conduct the reviews and write reports to support Integrated Security Assessment Program (ISAP) or Technical Information Systems Security Reviews (TISSRs).

Required Qualifications

• Practical experience performing information systems A&A as defined in applicable ICDs and guidance
• Practical experience utilizing risk management strategies for information technology solutions
• Technical understanding of emerging technologies and their implementation within Government system and network environments
• Knowledge of information technology concepts used in the evaluation of security performance and integrity of state-of-the-art applications, communications systems, hardware, software, satellite control systems, and information processing systems
• Technical understanding of information technology systems, software, and networks
• Ability to effectively coordinate A&A activities of industry and Government information systems to meet acquisition milestone requirements
• Effective technical report and general correspondence writing ability 
• Ability to manage and track systems or programs involved in the A&A process
• Experience developing and implementing security related directives and guidance for Information Assurance, Information Technology, and Information Management
• Experience working with a mixed level skill team to ensure that appropriate knowledge and skill transfer occurs
• High school’s degree and 7+ years of relevant experience, or
• Associate’s degree and 7+ years of relevant experience, or
• Bachelor’s degree and 5+ years of relevant experience, or
• Master’s degree and 3+ years of relevant experience

Certifications

Must have one of the following IAM Level 2 Certification:

• CGRC (Previously CAP)
• CASP
• CISM
• CISSP
• GSLC
• CCISO

Security Requirements

• U.S. Citizenship
• Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance
• Active Counterintelligence (CI) or Full Scope (FS) Polygraph

 Work Environment

• On-site work in a government or contractor facility 
• Occasional travel (up to 10%) 

*This position is dependent on a contract seat being awarded.

About LV8D Solutions

LV8D Solutions is an elite Systems Engineering and Technical Advisory (SETA) company that delivers advanced systems engineering, integration, acquisition, mission operations, network communications, and cybersecurity support to our defense and intelligence customers. Founded in 2019, we apply our deep technical expertise, understanding, and mission-first mindset to design, acquire, and implement complex, high-impact solutions for our Intelligence Community (IC) and Department of War (DoW) customers. We specialize in every aspect of our customers’ space and ground mission systems while offering exceptional work-life balance and an exemplary compensation and total rewards package designed to recruit, train, and retain top talent and committed to national defense and career growth.

Equal Employment Opportunity Statement

LV8D Solutions LLC is an Equal Opportunity Employer committed to diversity and inclusion. All qualified applicants will receive consideration without regard to race, religion, gender, national origin, disability, veteran status, or other protected categories.

Benefits

Performance & Recognition

Period of Performance (PoP) Bonus Opportunities
Performance-based bonus opportunities tied to contract or organizational performance.

Retention Incentive Benefit Bounty
Receive a payout for unused annual company contributions designated for health insurance premiums and professional training.

Referral Bonus
Earn up to $5,000 for each successful employee referral.

Customer Recognition Letter of Appreciation (LoA) Bonus Opportunities
Bonus opportunities based on customer recognition received through Letters of Appreciation.

Milestone Rewards
Celebrate your career achievements with anniversary awards on your 1st, 5th, 10th, and 20th years of service.

Financial & Retirement Benefits

Profit Sharing
Receive an annual contribution equal to 4% of your W-2 gross earnings into your 401 (k), with immediate vesting.

401(k) Company Match
The company matches your 401 (k) contributions dollar-for-dollar up to 6% of your monthly contribution, with immediate vesting.

Career Development

The company invests in your professional growth through:

• Annual financial support for professional training and industry certifications.
• Enhanced financial support for employees actively pursuing a degree at an accredited institution.

Work-Life Balance

Support for a healthy work-life balance includes:

• Flexible work hours
• Competitive paid time off (PTO)
• Company holidays

Health & Wellness Benefits

The company offers a comprehensive benefits package designed to support you and your family.

Medical Coverage

Three comprehensive Medical/Rx insurance plan options to meet the unique and individualized benefit needs of our employees

Dental & Vision

• Comprehensive dental insurance for employees and eligible dependents.
• Comprehensive vision insurance for employees and eligible dependents.

Income Protection

• 100% Company-Paid Short-Term Disability Insurance
• 100% Company-Paid Long-Term Disability Insurance

Life Insurance

• 100% Company-Paid Basic Term Life Insurance with Accidental Death & Dismemberment (AD&D) coverage.
• Optional employee-paid Supplemental Voluntary Life Insurance.