What You Will Do:
At Independent Software, we understand that strong security controls are the foundation of mission success. As a Security Control Assessor, Level 2 you will be responsible for conducting in-depth verification and validation activities to assess the cybersecurity posture of information systems. You’ll work with security engineers, system owners, and mission stakeholders to ensure low and moderately complex systems meet rigorous compliance standards and maintain operational readiness.This is an opportunity to make a real impact by identifying security risks, validating control implementation, and contributing to system certification efforts that protect national security missions.
Your attention to detail and technical expertise will directly support secure mission operations.At Independent Software, we value collaboration, innovation, and mission focus. We provide a flexible, supportive environment where you can grow your skills, work on impactful programs, and make a difference every day.
Key Responsibilities:
- Conduct verification and validation for the security compliance of low and moderately complex information systems, products, and components
- Analyze system design specifications, documentation, configuration, and operational procedures
- Identify areas of non-compliance and recommend mitigation strategies for unfulfilled security requirements
- Validate that systems meet defined security requirements and support the security authorization process
- Conduct on-site security control evaluations and assessments
- Coordinate and support vulnerability assessments and penetration testing activities
- Deliver certification reports detailing findings, analysis, and recommendations
- Provide input on process improvements and help draft standards or guidelines for security control implementation
- Facilitate penetration testing
- Provide a comprehensive verification and validation report (certification report) for the information system
Required Skills and Qualifications:
- Proficiency in analyzing technical documentation, security configurations, and operational security procedures
- Experience validating system compliance with security requirements
- Ability to assess and recommend mitigations for non-compliant security controls
- Strong understanding of cybersecurity principles including access control, PKI, authentication, and enterprise network architecture
- Familiarity with vulnerability assessment techniques and tools
- Effective communicator capable of delivering reports and collaborating across teams
Education and Experience:
- Minimum of twelve (12) years of experience in cybersecurity, systems engineering, or system assessment, with at least three (3) years of recent experience in the following areas:
- Cybersecurity principles and technology
- Access control and authentication systems
- PKI and encryption methods
- Network and enterprise security architecture
- A Master’s degree in Computer Science, Information Technology Engineering, or a related field may substitute for two (2) years of experience, reducing the requirement to ten (10) years total experience.
- In lieu of a Bachelor’s degree, an additional four (4) years of security or systems engineering experiencemay be substituted.
Certifications:
- Must meet applicable DoD 8570.01-M certification requirements
- IAM Level II certification required
Clearance Requirement:
- Must possess an active TS/SCI with appropriate Polygraph to be considered for this role
**This position is contingent on contract award**
We’re an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
