Astrion
Assessor
Astrion, Rockville, Maryland, us, 20849
Assessor
Be the Difference
Astrion offers comprehensive services that boost preparedness, optimize performance, and ensure success across various domains, from Cyber to Digital, Mission and Systems, servicing our nation's Civilian, Defense and Space communities. We support customers with Centers of Excellence in Washington DC, Huntsville, AL and Burlington, MA with an additional 36 locations across the U.S.
Astrion has an exciting opportunity for a
Assessor
for the
CPSS Contract , supporting the
Civilian Division.
JOB DETAILS
LOCATION:
90% remote. Must live in the DMV area for occasional customer meetings in Rockville, MD. These meetings could be last minute requests.
JOB STATUS:
FT
TRAVEL:
10% Occasional Domestic Travel
REQUIRED QUALIFICATIONS / SKILLS
BA/BS or 5 years additional equivalent experience.
6 years IT experience, with 4 years specialized in Information Assurance.
At least one of the following certifications: CompTIA Security+, CISSP, ISACA CISA, GIAC GSEC, GIAC GSNA, GIAC GPEN or CEH.
Required Security Clearance: Ability to obtain NRC IT-I
DESIRED QUALIFICATIONS / SKILLS
A strong understanding of FISMA and NIST Special Publications, especially NIST SP 800-37 and NIST SP 800-53.
Excellent written and oral communication skills; attention to detail is essential.
Experience with vulnerability scanning tools, such as Tenable Security Center.
Working knowledge of DISA STIGs and CIS Benchmarks.
Understanding of cloud service models (SaaS, PaaS, IaaS) and protections as described in FedRAMP security documentation.
Experience reviewing FedRAMP authorization packages and understanding how to ensure customer responsibilities are addressed in accordance with the shared responsibility model.
Experience with performing technical architecture reviews of complex systems with a strong understanding of a system's authorization.
Knowledge of major cloud platforms (Azure/Amazon Web Services [AWS]), virtualization, networking devices (e.g., routers and switches), web services (e.g., IIS, Apache Tomcat), network security appliances (e.g., firewalls, VPNs), databases (e.g., Microsoft SQL), and intrusion prevention/anti-malware software.
Knowledge of system and application security threats and vulnerabilities.
Proficiency with Microsoft Office applications.
Ability to prioritize and complete tasks efficiently and effectively.
Comfortable working individually and as part of a team.
Scripting ability (e.g., PowerShell, VBA) is a plus.
Knowledge of IT security architecture and design (firewalls, Intrusion Detection Systems, Virtual Private Networking, and virus protection technologies -- behavioral based a plus).
RESPONSIBILITIES
Work closely with all levels of personnel, including system administrators, Information System Security Officers (ISSOs), and Authorizing Official (AO), to support FISMA systems through the Security Assessment & Authorization (SA&A).
Understanding of Cloud platforms (PaaS, SaaS, IaaS) and protections as described in FedRAMP.
Assess/audit systems to analyze risk and report on identified weaknesses.
Develop documentation related to independent assessments.
Conducting in-depth technical reviews of new and existing IT systems.
Perform and document the results of vulnerability scans and configuration compliance checks against configuration standards such as DISA STIGs and CIS Benchmarks.
What We Offer
Competitive salaries
Continuing education assistance
Professional development allotment
Multiple healthcare benefits packages
401K with employer matching
Paid time off (PTO) along with a federally recognized holiday schedule
Who We Are
At Astrion, we innovate, elevate, and shape the world of tomorrow. At our core is our purpose to "Be the Difference". This means we encourage our employees to take action and be the driving force for positive change. We foster an environment where innovative solutions flourish and our company continuously evolves.
We have a culture of care, empathy, and making a tangible difference within our organization and communities. We embrace continuous learning, growth, and innovation, and pushing the boundaries of what's possible. We promote collaboration and empowering our teams is at the core of our success.
Join Astrion and Be the Difference in your career and the world!
Astrion is an Equal Employment Opportunity/Affirmative Action Employer. We provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation.
#LI-CK1
#J-18808-Ljbffr
Be the Difference
Astrion offers comprehensive services that boost preparedness, optimize performance, and ensure success across various domains, from Cyber to Digital, Mission and Systems, servicing our nation's Civilian, Defense and Space communities. We support customers with Centers of Excellence in Washington DC, Huntsville, AL and Burlington, MA with an additional 36 locations across the U.S.
Astrion has an exciting opportunity for a
Assessor
for the
CPSS Contract , supporting the
Civilian Division.
JOB DETAILS
LOCATION:
90% remote. Must live in the DMV area for occasional customer meetings in Rockville, MD. These meetings could be last minute requests.
JOB STATUS:
FT
TRAVEL:
10% Occasional Domestic Travel
REQUIRED QUALIFICATIONS / SKILLS
BA/BS or 5 years additional equivalent experience.
6 years IT experience, with 4 years specialized in Information Assurance.
At least one of the following certifications: CompTIA Security+, CISSP, ISACA CISA, GIAC GSEC, GIAC GSNA, GIAC GPEN or CEH.
Required Security Clearance: Ability to obtain NRC IT-I
DESIRED QUALIFICATIONS / SKILLS
A strong understanding of FISMA and NIST Special Publications, especially NIST SP 800-37 and NIST SP 800-53.
Excellent written and oral communication skills; attention to detail is essential.
Experience with vulnerability scanning tools, such as Tenable Security Center.
Working knowledge of DISA STIGs and CIS Benchmarks.
Understanding of cloud service models (SaaS, PaaS, IaaS) and protections as described in FedRAMP security documentation.
Experience reviewing FedRAMP authorization packages and understanding how to ensure customer responsibilities are addressed in accordance with the shared responsibility model.
Experience with performing technical architecture reviews of complex systems with a strong understanding of a system's authorization.
Knowledge of major cloud platforms (Azure/Amazon Web Services [AWS]), virtualization, networking devices (e.g., routers and switches), web services (e.g., IIS, Apache Tomcat), network security appliances (e.g., firewalls, VPNs), databases (e.g., Microsoft SQL), and intrusion prevention/anti-malware software.
Knowledge of system and application security threats and vulnerabilities.
Proficiency with Microsoft Office applications.
Ability to prioritize and complete tasks efficiently and effectively.
Comfortable working individually and as part of a team.
Scripting ability (e.g., PowerShell, VBA) is a plus.
Knowledge of IT security architecture and design (firewalls, Intrusion Detection Systems, Virtual Private Networking, and virus protection technologies -- behavioral based a plus).
RESPONSIBILITIES
Work closely with all levels of personnel, including system administrators, Information System Security Officers (ISSOs), and Authorizing Official (AO), to support FISMA systems through the Security Assessment & Authorization (SA&A).
Understanding of Cloud platforms (PaaS, SaaS, IaaS) and protections as described in FedRAMP.
Assess/audit systems to analyze risk and report on identified weaknesses.
Develop documentation related to independent assessments.
Conducting in-depth technical reviews of new and existing IT systems.
Perform and document the results of vulnerability scans and configuration compliance checks against configuration standards such as DISA STIGs and CIS Benchmarks.
What We Offer
Competitive salaries
Continuing education assistance
Professional development allotment
Multiple healthcare benefits packages
401K with employer matching
Paid time off (PTO) along with a federally recognized holiday schedule
Who We Are
At Astrion, we innovate, elevate, and shape the world of tomorrow. At our core is our purpose to "Be the Difference". This means we encourage our employees to take action and be the driving force for positive change. We foster an environment where innovative solutions flourish and our company continuously evolves.
We have a culture of care, empathy, and making a tangible difference within our organization and communities. We embrace continuous learning, growth, and innovation, and pushing the boundaries of what's possible. We promote collaboration and empowering our teams is at the core of our success.
Join Astrion and Be the Difference in your career and the world!
Astrion is an Equal Employment Opportunity/Affirmative Action Employer. We provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation.
#LI-CK1
#J-18808-Ljbffr