External Security Assessment Analyst

External Security Assessment Analyst

Prudent Technology is seeking an External Security Assessment Analyst to support the Social Security Administration's (SSA) cybersecurity and information security assessment initiatives. This role focuses on evaluating security controls, assessing compliance with federal security standards, identifying and mitigating risks, and ensuring the protection of SSA's information systems and data. The analyst will be responsible for reviewing security documentation, interpreting security agreements, developing data flow diagrams, conducting interviews and control testing, analyzing Plans of Action and Milestones (POA&Ms), and preparing Security Assessment Reports (SARs). The specialist will apply NIST SP 800-53, NIST SP 800-53A Revision 5, NIST SP 800-171, and the Risk Management Framework (RMF) to assess security control effectiveness, document findings, and recommend remediation strategies. Working closely with SSA staff and project teams, the analyst will help ensure compliance with federal cybersecurity policies, SSA Technical Security Standards and Requirements (TSSR), and applicable security frameworks while supporting risk management and continuous security improvement initiatives.

Location : Woodlawn, MD
Client : SSA (Social Security Administration)

Primary Duties and Responsibilities

• Able to interpret Security Agreements and develop Data Flow Diagram.
• Review provided artifacts to ensure they are compliant with Selected controls and SSA TSSR.
• Independently conduct interviews and test security controls.
• Generate Engagement Letters and Security Assessment Report.
• Analyze POAMs and upload on CAM ServiceNOW.
• Be familiar with NIST SP 800-53 and NIST SP 800-171
• Applies laws, regulations, and policies and procedures related to cybersecurity.
• Applies cybersecurity principles used to manage risk related to the use, processing, storage, destruction and transmission of information or data.
• Evaluates controls related to the use, processing, storage, destruction and transmission of data.
• Utilizes the Risk Management Framework (NIST 800-37) to assess information security controls to measure the effectiveness of controls and identify control gaps.
• Prepares security assessment reports.
• Identifies, assessing, evaluating and prioritizing risk.
• Collects evidence, artifacts and documenting findings to support conclusions.
• Report on compliance with policies, controls and standards.
• Evaluates proposed remediation of identified deficiencies.
• Provides guidance, input, or assistance on assessments to staff.
• Interprets and evaluating the implementation of NIST 800-53A Rev 5 Security controls as satisfied or other than satisfied.
• Documents security control compliance with Security Requirement Traceability Matrixes (SEQ/SRTMs) and Security Assessment Reports (SARs).

Minimum qualifications include:

• IT Security certified CAP or Security + or equivalent
• 2+ years of security control assessment experience
• Technical Knowledge in following areas required:
  • Project Management
  • Security and networking concepts, protocols, and network security methodologies.
  • Cloud Computing (FedRAMP)
  • Security framework and methodology
  • Information security principles and risk assessment techniques

Preferred qualification includes:

• Knowledge of executing examinations, interview, tests, collecting all relevant information.
• Knowledge to analyze collected data and proposed mitigating recommendations.
• Ability to make decisions based upon analysis of documentation.
• Ability to provide advice and technical support to SSA staff.
• Knowledge in assessment activities.
• Skill in applying risk management process (e.g., methods for assessing and mitigating risk).

Prudent Technology LLC is a Women Owned Small Business company providing innovative IT Automation and Data solutions to our federal clients. We are a team of self-starters, innovators and consultants providing cutting edge technologies for the federal government. We help our clients achieve their business and operational goals by solving complex problems through experience and intellect and build sustainable solutions that last.

At Commitment to Non-Discrimination