Federal RMF Security Assessor: Controls & Risk

Steampunk; Bloomington (IL); On-site; USD 105,000 - 160,000; Full time

Job summary

Steampunk is seeking a Security Control Assessor to support a government customer, ensuring risk remains at an acceptable level. The role requires initiative, organization, and strong communication across all levels, with handling of sensitive information in a fast-paced environment.

Responsibilities include leading assessments, evaluating controls across environments, developing Assessment Plans and SARs, coordinating with ISSOs and officials, analyzing vulnerabilities, presenting findings, and

Qualifications

• College degree plus experience in federal cybersecurity.
• Experience with NIST RMF and FedRAMP is required.
• Ability to review security artifacts and provide independent evaluations.

Responsibilities

• Lead security assessments per NIST SP 800-53 and RMF.
• Evaluate controls across cloud, on-prem, and hybrid environments.
• Develop Assessment Plans and SARs compliant with standards.
• Coordinate with ISSOs, System Owners, and Authorization Officials.
• Analyze vulnerability scans and remediation activities.
• Present findings to management and Authorization Officials.
• Support continuous monitoring and ongoing authorization.

Skills

NIST knowledge

Security assessment

Vulnerability analysis

Cloud/on-prem

Education

Bachelor's degree

Master's degree

Tools

Nessus

Tenable.SC

Splunk

SCAP scanners

IAM/MFA tooling

Job description

Steampunk is seeking a Security Control Assessor to support a government customer, ensuring risk remains at an acceptable level. The role requires initiative, organization, and strong communication across all levels, with handling of sensitive information in a fast-paced environment.

Responsibilities include leading assessments, evaluating controls across environments, developing Assessment Plans and SARs, coordinating with ISSOs and officials, analyzing vulnerabilities, presenting findings, and