Security Assessor

Who We’re Looking For (Position Overview):

Spry Methods is on the search for a Security Assessor to join our team in DC.

What Your Day-To-Day Looks Like (Position Responsibilities):

• Strong working knowledge of IT Security requirements, technical security countermeasures, risk managements processes, contingency planning, and secure data communications
• Demonstrated experience conducting full cycle SA&A
• Testing will include network, system, application and NIST control testing from administrative and technical perspectives
• Experience analyzing vulnerability scans and interpreting risks and employing manual checks to validate vulnerability data
• Be able to assist the customer with understanding risk and providing risk mitigation
• Will create Security Assessments Plans, Reports, and POA&Ms
• The security assessment team conducts documentation reviews, inspections, and interviews with key personnel knowledgeable/ responsible for the various controls
• Personnel interviewed are asked to show evidence of compliance, demonstration security features, provide access to (or screenshots of) configuration files and system logs, and perform tests
• The determination of compliance will be based upon responses to questions and analysis of supporting evidence..
• Knowledge of CSAM is a plus
• Strong cloud experience - conducting security assessments of MS Azure in AWS environments.

What You Need to Succeed (Minimum Requirements):

• At least 5 years experience
• Bachelor's Degree or 4 years of specialized experience
• Strong security assessor background
• Must understand the Risk Management Framework (RMF) process