Junior RMF Security Assessor

tharros

Washington (District of Columbia)

On-site

USD 65,000 - 95,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Tharros, supporting DHS, seeks a Junior Security Control Assessor for on-site work in a Government SCIF in Washington, DC. You will execute security control tests, perform vulnerability scanning, document findings, and help assemble authorization packages under senior guidance.

Requirements include a BS or 4+ years in IT/cybersecurity, 1+ year RMF testing, TS clearance with SCI eligibility, and strong communication skills. Cybersecurity certs and RSA Archer experience are a plus.

Qualifications

BS degree in IT, Cybersecurity, Information Systems, or Computer Science or 4+ years IT/cybersecurity experience.
Minimum 1 year RMF security testing or assessment experience.
Active Top Secret clearance with SCI eligibility contingency.
Knowledge of RMF and NIST SP 800-53A assessment procedures.
Knowledge of CNSSI 1253 baselines and related controls.
Understanding vulnerability scanning and configuration compliance concepts (STIGs, SCAP).
Experience with at least one scanning tool (Nessus/ACAS, Nmap, STIG Viewer).
Strong documentation of findings and communication skills.
Proficiency with MS Office and collaboration tools (Teams).
CompTIA Security+ or CySA+ certification preferred; RSA Archer experience.

Responsibilities

Execute security control test procedures against NIST, CNSSI, and IC standards.
Conduct vulnerability and configuration testing against STIGs and CIS benchmarks.
Document control weaknesses and deficiencies for Security Assessment Reports.
Review POA&M entries for accuracy and completeness.
Perform QA reviews of SSPs, Security Assessment Plans, and POA&Ms.
Assist in preparing A&A packages in the GRC tool.
Support System Security Test Reports and portfolio status reporting.