Join Our Team as a Security Control Evaluator!
SkyePoint Decisions, Inc. is on the lookout for a dedicated and talented Security Control Evaluator to enhance our team. You will be pivotal in providing support to the Department of Education's (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS). This is a remote position, offering you flexibility while you make a significant impact.
Key Responsibilities :
- Serve as a subject matter expert in the Security Assessment and Authorization (SA) program.
- Offer precise guidance and technical expertise in standards, policies, and procedures.
- Review and enhance OSA program and continuous monitoring capabilities, including Privacy Impact Assessments (PIA) and System Security Plans (SSPs).
- Analyze third-party applications and systems to provide informed guidance.
- Thoroughly assess system artifacts to support authorization to operate (ATO) requests.
- Review ATO packages under the Risk Management Framework (RMF) for FSA systems, ensuring quality before submission.
- Ensure accurate uploading of assessment and audit reports to the ED FISMA Management Tool (CSAM).
- Coordinate data collection efforts to support audit and compliance reporting.
- Conduct audits of Plan of Actions and Milestones (POA&M), ensuring completeness and compliance.
- Support ongoing security authorizations and continuous monitoring processes.
- Contribute to document development for CISO-sponsored events, including reviews and feedback.
- Monitor and track security authorization renewal dates and work with stakeholders for compliance.
- Lead lessons learned sessions and develop best practices.
Qualifications :
Ability to obtain a DoED Level 6 High Risk / Public Trust Security Clearance.Bachelor's degree or equivalent with 5-10 years of relevant experience.Minimum of 3 years in a computer security incident response role.Experience in enterprise Linux and Windows administration for at least 3 years.Background in a Security Operations Center is highly desirable.Familiarity with Active Directory and enterprise credential stores.A passion for information security and incident response.Knowledge of cyber threat intelligence.Strong communication and interpersonal skills.Excellent critical thinking and problem-solving abilities.Capacity to learn new technologies swiftly and adapt to changing environments.Ability to work autonomously and as part of a cross-functional team.Skills in identifying tactical and strategic solutions to complex challenges.Advanced malware analysis experience, including reverse engineering.Must be a U.S. citizen.Preferred Qualifications :
Active Top Secret security clearance is an advantage.What We Offer :
A culture of gratitude where we appreciate our employees and foster a meaningful community impact.Comprehensive benefits including diverse insurance options, Flexible Spending Accounts (FSAs), full dental plans, and matched 401k.A Certificate Incentive Program that rewards professional development and certification achievements.A flexible work environment to balance professional and personal commitments.Compensation :
The salary range for this position is TBD, influenced by various factors such as location, experience, and specific contract needs.
SkyePoint Decisions is committed to excellence, holding ISO 9001 : 2015 and ISO / IEC 27001 : 2013 certifications, and we foster a collaborative and supportive team culture. We value the contributions of our employees and aim to create a flexible working environment that encourages success both personally and professionally.
SkyePoint Decisions is proud to be an Equal Opportunity Employer and a participant in E-Verify. We invite you to join us and make a difference!