Soteria - Security Solutions & Advisory

Security Engineer

• Lead and execute cybersecurity control assessments against a defined subset of key controls aligned to established frameworks (NIST SP 800-53 Rev. 5).
• Assess control implementation status using standardized criteria and validation methodologies. (NIST SP 800-53A Rev. 5).
• Test information systems using documentation review, system walk-throughs, and stakeholder interviews to assess the design and operating effectiveness of NIST SP 800-53 Rev. 5 security controls.
• Apply consistent judgment to determine evidence sufficiency and appropriateness.
• Lead planning, kickoff, execution coordination, and closeout activities for assigned assessment engagements.
• Coordinate assessment activities and task assignments across Control Assessors to meet delivery timelines.
• Serve as the primary point of contact for client stakeholders during assessment engagements.
• Review and approve assessment narratives, findings, and control determinations prior to quality assurance submission.
• Ensure assessments are executed consistently across multiple clients to support trend analysis and benchmarking.
• Enforce adherence to defined assessment methodologies, scope boundaries, and validation standards.
• Support quality assurance reviews by addressing feedback and ensuring accuracy, clarity, and consistency of deliverables.
• Lead and participate in client interviews, system walkthroughs, and working sessions in a professional, structured manner.
• Clearly communicate assessment scope, expectations, and evidence requirements to stakeholders.
• Present assessment results, key findings, and risk implications to executive leadership and board-level stakeholders in a clear, concise, and professional manner.
• Mentor and guide Control Assessors on assessment techniques, documentation standards, and professional judgment.
• Escalate risks, issues, or control interpretation questions to program leadership as appropriate.

Senior Security Advisor – Lead Control Assessor