Security Control Assessor (REMOTE)

Koniag Data Solutions (KDS), a Koniag Government Services company, is seeking a Mid-Level Cybersecurity Analyst to support KDS and specialize in Security Control Assessments to support our federal government clients. This position requires the candidate to be able to obtain a Public Trust. The position is remote.   We offer competitive compensation and comprehensive benefits including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.    The ideal candidate will have experience in conducting thorough security assessments, analyzing security controls, and providing detailed recommendations for security improvements.     Essential Functions, Responsibilities & Duties may include, but are not limited to:The Mid-Level Cybersecurity Analyst will be responsible for:  Conducting comprehensive security control assessments following NIST guidelines  Performing security testing and evaluation of systems and applications  Documenting assessment findings and preparing detailed reports  Analyzing system security plans and associated security documentation  Evaluating security controls and their implementation  Supporting Authorization to Operate (ATO) processes  Conducting vulnerability assessments and penetration testing  Assisting in the development of Plans of Action and Milestones (POA&Ms)  Participating in security working groups and technical meetings  Collaborating with system owners and stakeholders  Supporting continuous monitoring activities  Maintaining assessment documentation and evidence  Providing recommendations for remediation of security findings    Position Note: At this time, the customer does not currently have a GRC tool. Our assessments are rather manual.   Education and Experience:  Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field  5+ years of experience in cybersecurity  3+ years of direct experience conducting security control assessments  Experience with federal information security requirements and guidelines  Current security clearance or ability to obtain one    Required Skills and Competencies:  Deep understanding of NIST SP 800-53 security controls  Experience with Risk Management Framework (RMF)  Knowledge of Federal Information Security Management Act (FISMA) requirements  Proficiency in security assessment and authorization processes  Experience with vulnerability scanning tools (Nessus, Qualys, etc.)  Strong analytical and problem-solving skills  Excellent documentation and technical writing abilities  Knowledge of common security tools and technologies  Understanding of cloud security concepts  Experience with security documentation review  Strong communication and interpersonal skills  Ability to work independently and as part of a team  Proficiency in Microsoft Office suite  Experience with security assessment tools and methodologies    Desired Skills and Competencies:  Security+ or higher cybersecurity certification  CISSP, CISA, or similar professional certification  Experience with FedRAMP assessment processes  Knowledge of CMMC requirements  Familiarity with cloud service providers (AWS, Azure, GCP)  Experience with automated security assessment tools  Background in federal government contracting  Knowledge of DevSecOps practices  Experience with continuous monitoring programs  Scripting abilities (Python, PowerShell, etc.)  Experience with security compliance frameworks  Prior military or government experience  Incident response experience  Knowledge of privacy requirements and controls    Security Requirement: Ability to obtain a Public Trust   Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.   The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [email protected] or by calling 703-488-9377 to request accommodations.   Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.   Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352