Security Control Assessor (REMOTE)

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.

This contract Security Control Assessor role supports a large federal agency and is focused on protecting digital identities and network assets within a large-scale IT environment. The role involves implementing security controls, conducting risk assessments, and utilizing tools such as network and vulnerability scanning technologies, as well as Governance, Risk, and Compliance (GRC) tools. Candidates should possess seasoned IT security expertise, hands-on technical skills, and strong communication and planning abilities. It's a high-impact opportunity to shape identity and access security within a major federal agency.

This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency required. If hired, all work related to this role must be performed within the continental U.S.

Responsibilities:

• Manage responsibility for security assessments of various applications or domains, including cloud computing.
• Implement security controls and conduct risk assessments based on NIST RMF and ISO standards.
• Support documentation, validation, and accreditation processes for IT systems.
• Ensure appropriate treatment of risk, compliance, and assurance.
• Develop actionable security blueprints, principles, models, designs, standards, and guidelines.
• Utilize network and vulnerability scanning tools to interrogate systems.
• Design, implement, and maintain secure IT infrastructures.
• Utilize GRC tools for managing Assessment & Authorization (A&A) processes.
• Serve as SME for the A&A process, providing guidance to stakeholders and business units.
• Build and maintain schedules and step-by-step action plans.
• Communicate and collaborate effectively with cross-functional teams and stakeholders.

Requirements:

• 5-8 years of related career experience
• Experience managing security assessments for large projects.
• Proficiency in implementing security controls and conducting risk assessments.
• Knowledge of NIST RMF and ISO standards.
• Experience with network and vulnerability scanning tools.
• Proficiency in using GRC tools for A&A processes.
• Strong organizational skills.
• Effective communication and collaboration skills.
• U.S. Citizenship or Permanent Residency required.

Skill(s):

• Strong understanding of security architecture principles.
• Ability to manage multiple projects simultaneously.
• Excellent documentation and compliance skills.
• Expertise in IT infrastructure design and maintenance.
• Ability to serve as a subject matter expert.
• Strong organizational and planning skills.
• Effective communication skills for briefing executives.
• Ability to work with cross-functional teams.

Benefits:

• Insurance – health, dental, and vision
• Paid Time Off (PTO) and 11 Federal Holidays
• 401(k) employer match