Cloud Security Control Assessor – ARCYBER A&A Expert

Peraton; Alexandria (VA); On-site; USD 146,000 - 234,000; Full time

Benefits offered by this job

Medical benefits

401(k) retirement plan

Paid time off

Job summary

Peraton seeks a Cloud Security Control Assessor to support Army Cyber Command (ARCYBER). Location: Alexandria, VA/near Fort Belvoir.

Responsibilities include risk mitigation planning, A&A for ARCYBER cloud infrastructure, and maintaining the System Security Plan under NIST/FISMA guidelines. The role requires deep RMF/NIST knowledge, IAM level III certification, and experience with eMASS, ACAS, CCSP/Cloud+, with a TS clearance and US citizenship.

Qualifications

• 12+ years with BS/BA; 10+ with MS/MA; 7+ with Ph.D.; HS+16 or Associates+14 accepted
• Current IAM level III certification (e.g., CISM)
• Experience with enterprise cloud environments (JWICS, SIPRNET, NIPRNET, and commercial Internet)
• Experience with eMASS, ACAS, and CCSP/Cloud+
• Knowledge of RMF, NIST, cloud security concepts, risk management, PII/PHI, and data protection
• Familiarity with cyber threats, vulnerability assessment tools, and defense-in-depth principles
• Understanding of cybersecurity laws, policy, and ethics; familiarity with critical infrastructure security

Responsibilities

• Conduct assessments and facilitate risk mitigation planning
• Provide A&A for ARCYBER cloud infrastructure
• Execute a security control assessment plan and update the System Security Plan
• Review vulnerability scans and remediation
• Implement RMF-based risk management programs and document solutions
• Monitor privacy landscape regarding data protection, classification, and residency
• Identify gaps in client privacy programs and design remediation solutions
• Scan, test, and validate systems to obtain/maintain ATO under NIST/FISMA

Skills

IAM level III

Cloud computing

NIST/FISMA knowledge

RMF familiarity

CCSP/Cloud+ experience

Vulnerability assessment tools

PII/PHI data handling

Threat/vulnerability knowledge

Federal agency security

Networking concepts

Education

BS/BA +14+ yrs

MS/MA +10+ yrs

PhD +7+ yrs

Tools

eMASS

ACAS

ISC2 CCSP or CompTIA Cloud+

Job description

Peraton seeks a Cloud Security Control Assessor to support Army Cyber Command (ARCYBER). Location: Alexandria, VA/near Fort Belvoir.

Responsibilities include risk mitigation planning, A&A for ARCYBER cloud infrastructure, and maintaining the System Security Plan under NIST/FISMA guidelines. The role requires deep RMF/NIST knowledge, IAM level III certification, and experience with eMASS, ACAS, CCSP/Cloud+, with a TS clearance and US citizenship.