Motion Recruitment | Jobspring | Workbridge

Cyber Security Auditor- Hybrid Aberdeen, MD

Arlington, Virginia

Hybrid

Full Time

$95k - $140k

Cyber Security Auditor

The company is located in Aberdeen, MD and will require 2-3 days onsite a week.

What You Will Be Doing:
  • Use HP Fortify to analyze code scan results submitted by developers
  • Identify and validate false positives in scan results
  • Provide comments on vulnerabilities identified and recommend POA&M (Plan of Action and Milestones) mitigations
  • Install software on isolated VMs and evaluate it against 800-53 controls and AS&D STIG
  • Use tools like Wireshark and Attack Surface Analyzer to assess software traffic and connections
  • Assess hardware compliance with designated STIG or SRG requirements
  • Document assessment findings and suggest mitigation strategies
  • Support assessments of subordinate sites for compliance with STIG, 800-53 controls, and Army regulations
  • Conduct STIG checklist reviews for branch-managed packages
  • Perform technical control audits in eMASS
Required Skills & Experience:
  • Bachelor’s degree in a relevant field with at least 5 years of experience; equivalent experience may substitute for a degree
  • Required certification in one of the following: CSSP-AU, CISA, IASAE, CASP+CE, CISSP (or associate), CSSLP
  • Must meet DoD 8570.01-M requirements for IAT Level II or IAM Level I
  • Relevant education and/or experience in the program area (Computer Science, Software Engineering, Information Systems), with specialized expertise in cybersecurity or information assurance
  • Specialized experience in AS&D STIG compliance, secure software development and testing, static and dynamic code analysis, software assurance, threat modeling, software/hardware risk and vulnerability analysis, or related functions
  • Proficiency with cybersecurity and IT audit tools such as ACAS, HP Fortify, HP Web Inspect, BURP Suite, and other software assurance tools
Security Clearance:
  • Must be able to obtain and maintain a Secret clearance
Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This position doesn’t provide sponsorship.

Posted by: Ashton Corbett

Specialization: