Security Operations & Assessment Engineer

Aderas is seeking a Security Operations & Assessment Engineer to join the team.

Primary Job Duties:

• Evaluate management, operational, and technical security controls against standards like NIST SP 800-53 (Rev. 5) and NIST SP 800-53A.
• Examine System Security Plans (SSPs), Security Assessment Plans (SAPs), Risk Assessments, Contingency Plans, and Privacy Impact Assessments (PIAs) for accuracy and completeness.
• Analyze vulnerability scan reports, configuration settings (such as DISA STIGs or CIS benchmarks), and network/data flow diagrams to verify real-world implementation.
• Compile results into a formal Security Assessment Report (SAR), detailing control deficiencies, residual risks, and impact levels.
• Track Remediation & POA&Ms: Help evaluate and track Plans of Action and Milestones (POA&Ms) established to fix identified vulnerabilities.
• Lead assessment entrance/exit briefings and work directly with System Owners, Information System Security Officers (ISSOs), and Information System Security Manager (ISSM).
• Provide objective technical data to support the Authorizing Official (AO) in granting or denying an Authorization to Operate (ATO).
• Support continuous monitoring and adaptation to agency-specific continuous monitoring strategies to align with FedRAMP 20x. and other compliance requirements.

Required Experience/Skills

• Deep familiarity with the NIST Risk Management Framework (RMF) (NIST SP 800-37), FISMA requirements, and federal cybersecurity policies.
• Multiple years of experience in cybersecurity, system auditing, or security engineering.

Required Education & Work Experience:

• Bachelors degree or higher in Information Systems Management, Information Technology, Cybersecurity, Computer Science, Business, Management, Engineering, or another related discipline
• Active industry certifications is preferred (common examples include CISSP, CGRC, CISA, CEH, or SSCP).
• Min. Five (5) years of professional IT experience with a master’s degree OR six (6) years of experience with a bachelor’s degree

Clearance/Citizenship: U.S. Citizen with Secret/T3 clearance Location: Hybrid in Washington, DC

Join the Aderas team!

Aderas is looking to recruit and retain only the best and brightest. If you like working with emerging technologies, using your unique personal skills to solve technical, functional, and organizational issues, and can easily adapt to the ever-changing IT market, then Aderas is the place for you! We are a vibrant company delivering implementation services & support for enterprise solutions and custom application development. We strive to form long-term partnerships with our clients to foster an environment based on trust, a proven history of delivery, and camaraderie.

Why Aderas?

We sincerely try to shape our employees' lives by administering a generous package of employee benefits. Our company culture encourages collaboration, creative thinking, and growth.

Beyond the tangible and intangible rewards, Aderas provides the following:

• Pay for Life, AD&D, Short-term disability, and Long-term disability at no cost to the employee.
• Employer contribution toward monthly health insurance premiums.
• 401k plan which employees are eligible for after being with the company for 3 months.
• Safe Harbor plan in which Aderas contributes 3% of employees' salaries once a year.
• A week of paid training and reimbursement for approved professional courses and tests.