Cross Domain Solutions (CDS) Security Control Assessor (Expert)

Description

Pueo is seeking a Cross Domain Solutions (CDS) Security Control Assessor (SCA) to join our unique team of multidisciplined experts onsite in McLean, VA. 

The CDS SCA brings specialized depth in cross-domain data-transfer security, including evaluation of XML Schema Definitions (XSD) and JSON schemas used in filter and validation rules.

The CDS SCA will be responsible for the following, but not limited to:

• Assist the Government client and Task Lead with CDS security assessment. Specific responsibilities include:
• Conducts comprehensive, independent assessments of the security controls employed within or inherited by CDS Information Systems, and submits the Body of Evidence (SSP, SAR, POA&M, draft ATO) to the AO/DAO. 
• Evaluate XSD, JSON schemas, and other languages used in cross-domain filters and validation.
• Advise stakeholders on categorization and C-I-A impact for cross-domain data flows.
• Interpret scan results and track POA&M items to remediation or risk acceptance.
• Design, configure, and maintain Cross Domain Solutions (CDS). 
• Develop and test filters, validation rules, and data-transfer policies. 
• Ensure CDS compliance with NSA Raise-the-Bar and applicable standards. 
• Troubleshoot and sustain CDS operations. 

Requirements

 Minimum Required Qualification:   

• Must have a current/active TS/SCI with the ability to obtain and maintain a CI Poly. 
• Master's degree in related field and 12 years of experience, or an additional 6 years of experience in lieu of a completed degree for a total of 18+ years.  
• Must be able to obtain and maintain an IAT III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex; CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP).
• Expert technical knowledge and experience in RMF, NIST 800-series, FIPS, and SA&A processes.
• Expert technical knowledge and experience in Continuous Monitoring framework and tools; POA&M policies; vulnerability/patch management.
• Expert technical knowledge and experience in documenting/reviewing SSP, SAR, SAP per NIST 800 guidelines.
• Experience interpreting scan reports (XACTA, STIGs, ACAS, PRISMA, Splunk, Trellix (HBSS)).
• Experience evaluating XSD, JSON schemas, and filter/validation languages.
• Experience leading security projects and initiatives.
• Possess strong interpersonal and communication skills.
• Ability to maintain strict confidentiality in a classified environment.  

Desired Qualifications:  

• An active Top Secret security clearance with   SCI eligibility and current CI poly. 
• Possess a current/valid IAT III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex; CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP).
• Team player in mixed technical teams.
• Experience evaluating XSD or JSON schemas in a CDS filter.
• Experience assessing a Cross Domain Solution. 

Salary Range Estimate: 

Min $187,894– Max $213,516. The estimate displayed represents the typical salary range for this position and is just one component of Pueo’s total compensation package for employees. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Pueo provides a variety of benefits to employees.

Pueo Overview: 

Pueo is a National Security cyber company built to inspect, defend, harden, and continuously authorize the networks our customers depend on. We deliver mission-grade cybersecurity across defense, intelligence, homeland security, federal enterprise, and critical infrastructure. Our work connects mission-risk inspection, defensive cyber operations, continuous authorization, security engineering, and mission delivery through one accountable team.

Pueo EEO Statement: 

Pueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.