CSSP Auditor
$120,000–$170,000 year
On-siteFort Belvoir, Virginia, United States
Job Summary
Establish and audit the CSSP Data Quality Scoring framework to validate telemetry trustworthiness, parsing success rates, and field completeness. Manage Evidence Objects to ensure absolute traceability from ingested security telemetry through risk-reduction decisions. Lead the full lifecycle of Standard Operating Procedures, maintaining SharePoint governance and version control for internal workflows. Map operational controls to NIST SP-800-53 Rev. 5 families and embed assessment methods to support continuous authorization and federal compliance mandates. Lead activities for CSSP Evaluator Scoring Metrics assessments, coordinating evidence collection and corrective action tracking to maintain an inspection-ready posture. Conduct recurring audits across Protect, Detect, Respond, and Sustain teams to assess procedural compliance and operational consistency. Identify recurring deficiencies and develop lessons learned reports to facilitate continuous process improvement initiatives.
Required Qualifications
- Active Top-Secret Clearance with SCI eligibility
- DoD 8140/8570 CSSP Auditor or equivalent certifications
- Certified Information Systems Auditor (CISA)
- Minimum of 7+ years of progressive experience in cybersecurity auditing, continuous monitoring, or compliance assessment
- 5+ years with a Master's degree (alternative to 7+ years experience)
- Minimum of three (3) years supporting DoD or Federal cybersecurity programs
- Experience supporting audit, inspection, or accreditation activities within a Security Operations Center (SOC), Cybersecurity Service Provider (CSSP), Cyber Defense Program, or related environment
- BA/BS College degree
- Proven experience auditing database/SIEM logs, data ingestion schemas, and validating compliance data flows
- Familiarity with data dictionaries, data validation rules, and automated log analysis
- U.S. Citizenship
- Ability to comply with any vaccination requirements mandated by contract, applicable law or regulation
- Consent to receive text messages regarding interview and employment status
- Agreement that TekSynap Corporation may retain and use name, e-mail, and contact information for purposes related to employment consideration
- Ability to lift up to 10 pounds
- Ability to lift up to 25 pounds
- Ability to lift up to 50 pounds
- Close vision
- Distance vision
- Peripheral vision
- Depth perception
- Ability to adjust focus
Desired Qualifications
- Familiarity with data dictionaries, data validation rules, and automated log analysis
- DoD Cybersecurity Service Provider (CSSP) operations
- Risk Management Framework (RMF)
- NIST SP 800-53 Rev. 5 and NIST SP 800-53A
- DoDI 8530.01 and applicable CSSP guidance
- CNSSI 1253
- Security Technical Implementation Guides (STIGs)
- Continuous Monitoring programs
- Incident Response processes
- Vulnerability Management programs
- Audit, compliance, and inspection readiness activities
- MITRE ATT&CK Framework
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.