Security Assessor

Who We’re Looking For (Position Overview): Spry Methods is on the search for a Security Assessor to join our team in DC. What Your Day-To-Day Looks Like (Position Responsibilities): Strong working knowledge of IT Security requirements, technical security countermeasures, risk managements processes, contingency planning, and secure data communications Demonstrated experience conducting full cycle SA&A Testing will include network, system, application and NIST control testing from administrative and technical perspectives Experience analyzing vulnerability scans and interpreting risks and employing manual checks to validate vulnerability data Be able to assist the customer with understanding risk and providing risk mitigation Will create Security Assessments Plans, Reports, and POA&Ms The security assessment team conducts documentation reviews, inspections, and interviews with key personnel knowledgeable/ responsible for the various controls Personnel interviewed are asked to show evidence of compliance, demonstration security features, provide access to (or screenshots of) configuration files and system logs, and perform tests The determination of compliance will be based upon responses to questions and analysis of supporting evidence.. Knowledge of CSAM is a plus Strong cloud experience - conducting security assessments of MS Azure in AWS environments. What You Need to Succeed (Minimum Requirements): At least 5 years experience Bachelor's Degree or 4 years of specialized experience Strong security assessor background Must understand the Risk Management Framework (RMF) process