DoD Security Controls Assessor – RMF & STIG Expert

Leidos; United States; Remote; USD 70,000 - 126,000; Full time

Job summary

Leidos is seeking multiple Security Control Assessors to support our assessment team in DoD environments. Roles can be based in Alexandria, VA, Fort Meade, MD, or Chambersburg, PA with primarily on-site work and up to 80% travel.

Responsibilities include conducting cybersecurity assessments, applying RMF/NIST controls, and using tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS. A TS clearance with SCI eligibility is required along with strong communication skills.

Qualifications

• Active DoD Top Secret clearance with SCI eligibility required.
• Current DoD 8570 IAM II or IAT II certification.
• Bachelor's degree (IT-related field preferred) and five (5) years of cybersecurity or network security experience.
• Three (3) years of experience in a Certification and Accreditation/A&A role.
• Demonstrated experience with STIGs, SRGs, POA&Ms and cybersecurity best practices, and tools listed above.
• Strong understanding of RMF process and NIST SP 800-53, 800-37, CNSSI 1253.

Responsibilities

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and testing.
• Adhere to policies for each assessment type and support development and execution of assessments.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate cybersecurity controls and compliance with DoD policies and guidelines.
• Provide risk analysis and assessment results for authorization recommendations.
• Mentor junior staff to share expertise and best practices.

Skills

Security clearance

DoD RMF/NIST

Travel readiness

Communication skills

Certification & Accreditation/A&A

Education

Bachelor's degree in IT or related field

Tools

eMASS

STIG Viewer

Nessus

ACAS

SCAP

HBSS

Job description

Leidos is seeking multiple Security Control Assessors to support our assessment team in DoD environments. Roles can be based in Alexandria, VA, Fort Meade, MD, or Chambersburg, PA with primarily on-site work and up to 80% travel.

Responsibilities include conducting cybersecurity assessments, applying RMF/NIST controls, and using tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, and HBSS. A TS clearance with SCI eligibility is required along with strong communication skills.