On-Site DoD RMF Security Controls Assessor

Leidos Inc; Alexandria (VA); On-site; USD 70,000 - 126,000; Full time

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave and Retirement

Job summary

Leidos is seeking multiple Security Control Assessors to support our assessment team in Alexandria, VA, Fort Meade, MD, or Chambersburg, PA. Roles are primarily on-site with light telework at the program manager's discretion, and travel may reach about 80% of the time.

Responsibilities include performing DoD cybersecurity assessments, validating RMF controls, and documenting findings in eMASS, with mentorship to junior staff.

Qualifications

• Active DoD Top Secret clearance with SCI eligibility.
• Current DoD 8570 IAM II or IAT II certification.
• Willing to travel up to 80% of the time.
• Bachelor's degree in IT-related field and five years of cybersecurity experience.
• Three years in a Certification and Accreditation/A&A role.
• Experience with STIGs, SRGs, POA&Ms and tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP or HBSS.
• Strong understanding of RMF, NIST SP 800-37/53, CNSSI 1253 and related tech areas.
• Strong written and verbal communication skills.

Responsibilities

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners.
• Evaluate systems using cyber threat emulation and performance-based testing.
• Adhere to policies and processes for each assessment type.
• Support assessment development and execution with security expertise.
• Coordinate logistics, test plans, and scope with the SCA Team Lead.
• Perform vulnerability assessments and document findings in eMASS.
• Analyze security gaps and provide mitigation recommendations.
• Validate RMF controls and DoD policy compliance.
• Provide risk analysis and authorization recommendations.
• Participate in daily assessment reviews, in-briefs, and out-briefs.
• Mentor senior staff and share best practices.

Skills

Security clearance

DoD IAM II/IAT II

Willing to travel 80%

Bachelor's degree in IT

5 years cybersecurity experience

3 years C&A/A&A experience

STIGs/SRGs/POA&Ms experience

RMF/NIST knowledge

Strong reporting skills

Education

Bachelor's degree in IT-related field

Tools

eMASS

STIG Viewer

Nessus

ACAS

SCAP

HBSS

Job description

Leidos is seeking multiple Security Control Assessors to support our assessment team in Alexandria, VA, Fort Meade, MD, or Chambersburg, PA. Roles are primarily on-site with light telework at the program manager's discretion, and travel may reach about 80% of the time.

Responsibilities include performing DoD cybersecurity assessments, validating RMF controls, and documenting findings in eMASS, with mentorship to junior staff.