Control Validation Security Specialist

Electrosoft

Control validation specialist auditing cybersecurity controls for federal and DoD customers. Evaluating risk, vulnerabilities, mitigations, and compliance across systems and networks.

Posted 8/12/2026full-timeRemote • 🇺🇸 United StatesJuniorMid-Level💰 $85,000 - $95,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT auditing, risk management framework principles, and compliance with Federal and DoD standards. Proficient in conducting vulnerability assessments, technical report writing, and analyzing security requirements against business needs.

Highest-signal resume keywords

IT AuditingRisk Management Framework (RMF)DoD 8500.2 ComplianceTechnical Report WritingDoD Approved 8570 Baseline Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Control ValidationVulnerability AssessmentRisk AssessmentSecurity ImplementationMitigation AnalysisTechnical SupportSecurity Improvement EvaluationAnalytical SkillsProblem-Solving SkillsUnderstanding of eMASS

Soft Skills

Analytical ThinkingProblem-Solving

Tools & Technologies

Microsoft ExcelMicrosoft AccessMicrosoft Office SuiteEnterprise Log Management Systems

Certifications & Qualifications

DoD Approved 8570 Baseline Certification: Category IAM-IIAT-II CertificationRelevant Certification from a Nationally Recognized Authority

Industry Keywords

Federal StandardsDoD StandardsFISCAM 2024Audit Logging eOPRAnnual Statement of AssuranceSSAE-18 Audit

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Perform IT audits on complex information systems, applications, and enclaves to verify controls exist, are correctly implemented, and comply with Federal and DoD standards
Evaluate the required level of security
Perform procedures to protect information system assets from intentional or inadvertent access or destruction
Guide and assist with audit readiness issues involving new approaches, precedents, or interpretation of law, regulation, or past practice
Support the Financial Statement Audit, Annual Statement of Assurance, SSAE-18 Audit, and Audit Logging eOPR
Provide technical support for vulnerability assessment, risk assessment, network security, and security implementation
Technically evaluate customer systems and assist with security improvements
Conduct cybersecurity control validation exercises on unclassified networks, applications, and systems
Weigh business needs against security concerns and analyze mitigations against security requirements

Requirements

What you’ll need

Two (2) years of experience working with DoD 8500.2 or NIST SP 800-53 and understanding risk management framework principles
Strong analytical and problem-solving skills for resolving security issues
Proficiency with Microsoft Excel, Access, and Microsoft Office suite, including Word and PowerPoint
Understanding of Enterprise Mission Assurance Support Service (eMASS)
Understanding of weighing business needs against security concerns
Experience analyzing mitigations against security requirements
Knowledge of RMF (800-53 rev5)
Experience with technical report writing and providing evidentiary matter for findings and recommendations
Relevant certification from a nationally recognized authority
DoD Approved 8570 Baseline Certification: Category IAM-I or minimum IAT-II
Previous SCAR or Auditor experience preferred
Associate degree or higher preferred
Previous FISCAM 2024 experience a plus
Knowledge of Enterprise Log Management Systems a plus

Benefits

Comp & perks

Meaningful work
Growth opportunities
Work-life balance
Teamwork-oriented workplace
Lunch & Learn sessions
Fun group activities, including escape rooms and miniature golf
Outstanding effort recognized and rewarded