Federal Cybersecurity Assessor (TS Clearance)

Pitech Solutions, Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 110,000 - 165,000; Full time

Job summary

PiTech Solutions Inc is seeking a Cybersecurity Analyst to support independent, evidence-based cybersecurity assessments for U.S. federal agencies.

The role plans and executes security control assessments, testing, and compliance evaluations aligned to FISMA/NIST; an active Top Secret clearance is required. Responsibilities include RMF support, hands-on testing across endpoints, cloud, and IAM, and delivering actionable findings with executive summaries.

Qualifications

• Active TS clearance with eligibility to maintain access.
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent relevant experience.
• 7+ years of cybersecurity experience in federal or regulated environments (or 5+ years with a Master’s degree).
• Familiarity with federal cybersecurity requirements and assessment approaches (FISMA; NIST SP 800-53; RMF concepts and artifacts).
• Hands‑on ability to review configurations and validate controls across Windows/Linux, AD/Azure AD, network, endpoints, and logging/monitoring.
• Strong written and verbal communication; ability to produce executive-ready summaries.

Responsibilities

• Assessment planning and scoping: engage with agency stakeholders to confirm system boundaries, environments (on-prem/cloud/hybrid), data types, and mission priorities; define objectives, methodology, schedule, sampling, and evidence requests.
• Security control assessment: evaluate controls against baselines/overlays (NIST SP 800-53); map statements to evidence and document results, rationale, and traceability.
• RMF support: assist with categorization, selection, implementation validation, assessment, authorization, and continuous monitoring; review SSPs, SAP/SAR, POA&Ms.
• Technical validation and testing: perform hands-on security testing with authorization, including configuration reviews, vulnerability validation, log review across endpoints, servers, IAM services, cloud resources, and tooling.
• Vulnerability and configuration assessment: run automated scans (credentialed when possible), benchmark configurations (CIS/STIG), identify false positives/negatives; provide remediation recommendations.
• Cloud security assessment: evaluate cloud configurations and controls (identity, network segmentation, encryption, logging, key management, shared responsibility) across CSPs and FedRAMP expectations.
• Incident readiness and operational security: assess SOC processes, playbooks, alerting, escalation, forensics readiness, and tabletop exercises; review logging coverage and retention.
• Policy, governance, program reviews: assess cybersecurity program documentation, governance, risk acceptance, exception handling, asset management, vulnerability management, secure configuration, change control, and third‑party risk.
• Evidence management: collect, organize, and protect sensitive assessment materials; maintain evidence trail (interview notes, screenshots, configuration exports, scan outputs, log samples).
• Reporting and briefings: draft findings, risk ratings, root cause, impacts, recommendations; present to technical teams and executives; tailor communications for depth and decision-making.
• Remediation support and verification: collaborate with owners to validate remediation plans, track POA&Ms, and re-test with evidence review.
• Stakeholder coordination: work with federal personnel, contractors, and third parties; coordinate interviews and sessions; provide status updates and escalate blockers.
• Quality and compliance: follow internal standards, templates, QA processes to ensure accuracy and contract alignment.

Skills

Written communication

Verbal communication

Leadership of workstreams

Technical testing

RMF knowledge

Education

Bachelor’s degree in Cybersecurity or related field

Master’s degree beneficial

Tools

GRC artifacts

Vulnerability scanning

IAM/AD

SIEM platforms

Cloud platforms

Job description

PiTech Solutions Inc is seeking a Cybersecurity Analyst to support independent, evidence-based cybersecurity assessments for U.S. federal agencies.

The role plans and executes security control assessments, testing, and compliance evaluations aligned to FISMA/NIST; an active Top Secret clearance is required. Responsibilities include RMF support, hands-on testing across endpoints, cloud, and IAM, and delivering actionable findings with executive summaries.