Security Controls Assessor (SCA) Representative

KBR, Inc.
Colorado Springs, CO
Category Security
Job Description
Role Overview

The Security Controls Assessor (SCA) Representative will support the United States Space Force (USSF) Risk Management Framework, Cybersecurity Framework (RMF, CSF) compliance activities to ensure security controls are defined, implemented, and assessed for complex multi-level security architectures of advanced aerospace systems.

What You Will Do

Conducts independent comprehensive assessments of the management, operational, and technical security controls, and control enhancements implementation within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls.

Why It Might Be a Fit

The ideal candidate will have prior experience as a SAP SCA or SAP SCA Representative, strong knowledge of RMF/CSF process activities, and demonstrated ability to perform cybersecurity assessments and develop a security risk management plan.

Requirements

  • Active TS/SCI and eligible for SAP/SAR
  • Prior experience as a SAP SCA or SAP SCA Representative
  • 5 years of Linux experience in implementation/principles/administration
  • Strong knowledge of RMF/CSF process activities and related documentation
  • Demonstrated ability to perform cybersecurity assessments, identify gaps in cybersecurity architecture, and develop a security risk management plan
  • Ability to ensure Body of Evidence (BoE) artifacts are in place for vulnerabilities/deficiencies identified during risk assessments, audits, inspections, etc.
  • Demonstrated technical proficiency in at least two of the following areas of security: communications, networks, embedded systems, software, system testing or assessment, etc.
  • Certified Information System Security Professional (CISSP)
  • Ability to verify software/network/system security postures are implemented within a DevSecOps process, agile methodology and continuous integration/continuous delivery (CI/CD) pipeline to ensure cybersecurity requirements are included in early during development

Benefits

  • 401K plan with company match
  • Medical
  • Dental
  • Vision
  • Life insurance
  • AD&D
  • Flexible spending account
  • Disability
  • Paid time off
  • Flexible work schedule
]]>