OSCAL Specialist

Job Title: OSCAL Specialist

Location: Baltimore, MD

Introduction:

C2 Labs [www.c2labs.com] partners with clients on their IT transformation journey via data-driven IT strategic planning, application rationalization and redevelopment, and innovative research and development of new industry standards and technologies. C2 Labs provides specialized products and services that allow our clients to innovate with speed and scale seamlessly while maintaining a robust and effective security posture. C2 has a unique approach to client success enablement that is empowered by ART (Application Rationalization andTransformation) and SCIENCE (Strategic Client Interview and Engineering to assess, design, and implement Cloud Ecosystems) to couple creative new approaches/technologies with proven methodologies that deliver rapid results.
Must be a US Citizen and capable of passing a Public Trust background investigation.

Job Description:

C2 Labs is seeking a skilled and detail-oriented OSCAL Specialist to join our growing team. In this role, you will be responsible for performing control validation, supporting continuous monitoring efforts, and assisting with OSCAL (Open Security Controls Assessment Language) pilot activities. You will be instrumental in leveraging OSCAL to enhance our clients' security assessment and authorization processes.

Responsibilities:

• Perform security control validation activities based on established standards and procedures.


• Contribute to the development and implementation of continuous monitoring strategies using OSCAL.


• Assist with OSCAL pilot activities, including testing and evaluating new OSCAL tools and techniques.


• Develop and maintain OSCAL-based documentation, including system security plans (SSPs), control catalogs, and assessment procedures.


• Analyze and interpret security assessment data, identifying areas for improvement.


• Work closely with security engineers, compliance analysts, and other stakeholders to ensure compliance with security policies and regulations.


• Contribute to the development of internal OSCAL best practices and standards.


• Stay up-to-date with the latest OSCAL developments and advancements.

Qualifications:

• Bachelor's Degree


• 3+ years of experience in information security, compliance, or a related field.


• Familiarity with security control frameworks (e.g., NIST 800-53, FedRAMP) is required.


• Experience with OSCAL.


• Strong understanding of security assessment methodologies.


• Excellent analytical and problem-solving skills.


• Excellent written and verbal communication skills.


• Ability to work independently and as part of a team.

C2 Labs is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.