Job Type
Full-time
Description
Pueo is seeking a Cross Domain Solutions (CDS) Security Control Assessor (SCA) to join our unique team of multidisciplined experts onsite in McLean, VA.
The CDS SCA brings specialized depth in cross-domain data-transfer security, including evaluation of XML Schema Definitions (XSD) and JSON schemas used in filter and validation rules.
The CDS SCA will be responsible for the following, but not limited to:
- Assist the Government client and Task Lead with CDS security assessment. Specific responsibilities include:
- Conducts comprehensive, independent assessments of the security controls employed within or inherited by CDS Information Systems, and submits the Body of Evidence (SSP, SAR, POA&M, draft ATO) to the AO/DAO.
- Evaluate XSD, JSON schemas, and other languages used in cross-domain filters and validation.
- Advise stakeholders on categorization and C-I-A impact for cross-domain data flows.
- Interpret scan results and track POA&M items to remediation or risk acceptance.
- Design, configure, and maintain Cross Domain Solutions (CDS).
- Develop and test filters, validation rules, and data-transfer policies.
- Ensure CDS compliance with NSA Raise-the-Bar and applicable standards.
- Troubleshoot and sustain CDS operations.
Requirements
Minimum Required Qualification: - Must have a current/active TS/SCI with the ability to obtain and maintain a CI Poly.
- Master's degree in related field and 12 years of experience, or an additional 6 years of experience in lieu of a completed degree for a total of 18+ years.
- Must be able to obtain and maintain an IAT III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex; CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP).
- Expert technical knowledge and experience in RMF, NIST 800-series, FIPS, and SA&A processes.
- Expert technical knowledge and experience in Continuous Monitoring framework and tools; POA&M policies; vulnerability/patch management.
- Expert technical knowledge and experience in documenting/reviewing SSP, SAR, SAP per NIST 800 guidelines.
- Experience interpreting scan reports (XACTA, STIGs, ACAS, PRISMA, Splunk, Trellix (HBSS)).
- Experience evaluating XSD, JSON schemas, and filter/validation languages.
- Experience leading security projects and initiatives.
- Possess strong interpersonal and communication skills.
- Ability to maintain strict confidentiality in a classified environment.
Desired Qualifications: - An active Top Secret security clearance with SCI eligibility and current CI poly.
- Possess a current/valid IAT III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex; CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP).
- Team player in mixed technical teams.
- Experience evaluating XSD or JSON schemas in a CDS filter.
- Experience assessing a Cross Domain Solution.
Salary Range Estimate: Min $187,894- Max $213,516. The estimate displayed represents the typical salary range for this position and is just one component of Pueo's total compensation package for employees. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Pueo provides a variety of benefits to employees.
