Lead Security Assessments & Risk Mitigation

OCH Technologies, LLC; Leesburg (VA); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Paid time off

Medical, Dental, Vision Insurance

Parental Leave

401(k)

Tuition Reimbursement

Job summary

OCH Technologies, LLC is seeking a Security Assessment Lead to act as the technical authority for independent risk and vulnerability assessments conducted under this contract. You will lead assessment planning, mentor teams, and ensure SAR quality following NIST 800-53A guidelines, with potential travel to FAA facilities in DC/OKC.

The role requires advanced cybersecurity leadership, hands-on assessment experience, and strong ability to translate findings into actionable POAMs for complex OT/ICS

Qualifications

• Fifteen (15)+ years of cybersecurity experience.
• Minimum of five (5) years of management and supervisory responsibility leading risk and vulnerability assessment teams.
• At least two (2) years of relevant experience performed within the last 3 years.
• Demonstrated track record of successful completion of multiple independent risk assessments and vulnerability assessments on complex, multi-system environments.
• Hands-on experience with NIST SP 800-53 (Rev. 4/5), SP 800-53A, SP 800-37 (RMF), and FIPS-199 security categorization.

Responsibilities

• Serve as primary technical POC for all security assessments, vulnerability assessments, and analyses of alternatives under the contract.
• Lead assessment planning and coordination at FAA facilities nationwide, including developing System Security Assessment Test Plans and managing pre- and post-assessment activities.
• Personally lead complex or high-visibility assessment events.
• Ensure all assessments use the three NIST 800-53A methods (Examine, Interview, Test) and produce compliant SARs.
• Develop and maintain vulnerability scanning strategies including TTPs.
• Evaluate and recommend scanning tools and configurations for NAS and Mission Support environments.
• Conduct risk translation from assessment findings and develop POAMs with actionable remediation guidance.
• Lead regression assessment activities to validate mitigations.
• Attend all Program Management Reviews and report on assessment status, deliverable timelines, and technical issues.
• Mentor and develop junior assessment staff.
• Build a team culture where analysts take ownership and drive assessments to completion.
• Coordinate with NAS system owners, FAA facility staff, AIT/AIS, and ACG to schedule assessments and resolve access/logistical issues.
• Ensure NAS environmental safety during assessments; some NAS tests may be lab-based.

Skills

Leadership

Team leadership

Communication

Analytical thinking

Problem solving

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, or Physics

Master’s degree in a related field

Tools

Nessus

WebInspect

AppDetective Pro

Nmap

Tcpdump

Job description

OCH Technologies, LLC is seeking a Security Assessment Lead to act as the technical authority for independent risk and vulnerability assessments conducted under this contract. You will lead assessment planning, mentor teams, and ensure SAR quality following NIST 800-53A guidelines, with potential travel to FAA facilities in DC/OKC.

The role requires advanced cybersecurity leadership, hands-on assessment experience, and strong ability to translate findings into actionable POAMs for complex OT/ICS