Control Validation Security Specialist

Job Description

Job Description

ORGANIZATIONAL BACKGROUND
Established in August 2016, Basecamp Consulting and Solutions is a dynamic Information Technology (IT) consulting firm committed to delivering results for our clients. Specializing in next-generation IT and digital transformation solutions, Basecamp Consulting and Solutions is dedicated to helping clients achieve success through trust, innovation, quality work, and a steadfast commitment to results.

At Basecamp, we believe in the power of emerging technologies to propel our clients toward their goals. Our focus lies in business and IT modernization, utilizing Cloud solutions, cybersecurity, and cutting-edge application development. We pride ourselves on a team of talented professionals who are passionate about supporting our clients on their journey towards innovative outcomes.

Basecamp Consulting and Solutions is dedicated to pushing the boundaries of IT consulting and we are equally committed to embodying these principles in every facet of our work.

POSITION OVERVIEW
Reporting to the Lead Account Executive, the Control Validation Security Specialist Under general supervision, performs IT audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist, are correctly implemented, and that procedures comply with Federal and DOD standards. Conducts accurate evaluation of the level of security required. Performs procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. provide guidance and assistance in the formulation and
implementation of audit readiness issues requiring new approaches, establishment of precedents, or the interpretation of controversial law, regulation, or past practice. Supports the Financial Statement Audit, Annual Statement of Assurance, SSAE-18 Audit, and the Audit Logging eOPR. Provides technical support in the areas of vulnerability assessment, risk assessment, network security, and security implementation. Provides technical evaluations of customer systems and assists with making security improvements. Conducts cybersecurity control validation exercises on unclassified networks, applications, and systems to validate the effectiveness of current security measures. Understands the concept of weighing business needs against security concerns and analyzes applied mitigations to evaluate whether they meet security
requirements.

REQUIRED QUALIFICATIONS

• Active DoD Secret Clearance
• DoD Approved 8570 Baseline Certification: Category IAM-I or minimum of IAT-II (CompTIA Security + etc)
• Two (2) years of experience working with DOD1 8500.2 or NIST SP 800-53 and understanding of the principles of the risk management framework.
• Strong analytical and problem-solving skills for resolving security issues.
• Proficiency in basic analytical software such as Microsoft Excel and Access, proficiency with the Microsoft Office suite, to include Word, PowerPoint
• Understanding of Enterprise Mission Assurance Support Service (eMASS)
• Understands the concept of weighing business needs against security concerns.
• Experience analyzing applied mitigations to evaluate whether they meet security requirements.
• Knowledge of RMF
• Relevant certification from a nationally recognized authority