> Markdown version of [/jobs/ext/2241157-control-validation-security-specialist-senior-qa-test-engineer-8](https://www.wearedevelopers.com/jobs/ext/2241157-control-validation-security-specialist-senior-qa-test-engineer-8). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CONTROL VALIDATION SECURITY SPECIALIST - SENIOR (QA/Test Engineer) (8)

- **Company:** Everforth Apex
- **Location:** Fort Belvoir, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Word, Microsoft Excel, Information Systems, Information Technology Audit, Network Security, Microsoft Office, Microsoft PowerPoint, Information Technology, 3-tier Architectures, Vulnerability Analysis
- **Published:** August 26, 2026
- **Apply:** https://www.dice.com/job-detail/286d1c6b-6b10-4c2a-bb99-932407c286e5

## About the Role

* Three (3) years of experience working with DOD1 8500.2 or NIST SP 800-53 and understand the principles of the Risk Management Framework (RMF).
 * Two (2) years of experience with eMASS
 * Strong analytical and problem-solving skills for resolving security issues.
 * Proficiency in basic analytical software such as Microsoft Excel and Access, proficiency with the Microsoft Office suite, to include Word, PowerPoint
 * Strong skills implementing and configuring networks and networks components.
 * Experience weighing business needs against security concerns.
 * Experience analyzing applied mitigations to evaluate whether they meet security requirements.
 * Must possess IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) prior to onboarding

## Description

CONTROL VALIDATION SECURITY SPECIALIST - SENIOR (QA/Test Engineer) (8)

 * Independently performs IT audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist, are correctly implemented, and that procedures are compliant with Federal and DOD standards.
 * Conducts accurate evaluation of the level of security required.
 * Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
 * Works at the highest level of all phases of information systems auditing.
 * Provides technical support in the areas of vulnerability assessment, risk assessment, network security, and security implementation.
 * Provides technical evaluations of customer systems and assists with making security improvements.
 * Conducts cybersecurity control validation exercises on classified and unclassified networks, applications, and systems to validate the effectiveness of current security measures.
 * Weighs business needs against security concerns and analyzes applied mitigations to evaluate whether they meet security requirements.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [In-depth .NET Azure Functions: Isolated mode, performance and durable AI agents](https://www.wearedevelopers.com/videos/100207-in-depth-net-azure-functions-isolated-mode-performance-and-durable-ai-agents)
- [Developing the Rich Text Editor for DeepL.com](https://www.wearedevelopers.com/videos/1172-developing-the-rich-text-editor-for-deepl-com)
- [Blazing Accessibility Basics](https://www.wearedevelopers.com/videos/568-blazing-accessibility-basics)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [From Syntax to Singularity: AI’s Impact on Developer Roles](https://www.wearedevelopers.com/videos/900-from-syntax-to-singularity-ai-s-impact-on-developer-roles)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)