RMF & SCA-R Cybersecurity Validator (Onsite/Travel)

Leidos; Alexandria (VA); On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

Per diem while traveling

On-site work

Job summary

Leidos seeks multiple SCA-R Validators to assess programs’ security posture, develop reports, and recommend improvements. Roles are primarily on-site with possible travel up to 50% to align with assessment teams across Alexandria, Fort Meade, and Chambersburg.

Candidates should hold a TS clearance with SCI eligibility, IAM II/IAT II, and 5+ years in C&A/A&A, with strong RMF, STIG/SRG, and NIST knowledge. Per diem is provided while traveling.

Qualifications

• Bachelor's degree in an IT-related field and eight years of cybersecurity or network security experience (or equivalent).
• Active DoD Top Secret clearance with SCI eligibility required.
• Current DoD 8570 IAM II or IAT II certification.
• Five years of experience in a Certification and Accreditation/A&A role.
• Demonstrated experience with STIGs, SRGs, POA&Ms, and cybersecurity best practices.
• Advanced understanding of RMF, NIST SP 800-37/800-53, CNSSI 1253.
• Demonstrated experience in risk analysis, control validation, and as a Security Control Assessor Representative (SCA-R).
• Experience with tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, HBSS.
• Advanced understanding of technologies areas/domains: Network, Windows, UNIX, Cloud, HBSS/Endpoint, Databases, Applications.
• Customer service skills and willingness to travel for assessments.

Responsibilities

• Use government tools to perform weekly updates, maintain records, and complete tasks.
• Coordinate with ISSMs and PMOs to understand mission and changes to security architecture and deployment locations.
• Conduct cybersecurity assessments and risk analyses across RMF steps using approved tools.
• Verify authorization boundaries and categorize systems (FIPS199).
• Identify data classifications and conduct system-level risk assessments.
• Track changes, assess impacts, and report updates to the AO.
• Evaluate authorization requests, web filtering, firewall exceptions, and SRG compliance.
• Lead assessment visits, briefings, and ensure proper documentation and reporting.
• Attend required training and meetings to stay updated on process changes.
• Maintain access to government databases and cybersecurity tools.
• Assess threats, vulnerabilities and cybersecurity risk, compiling findings into authorization packages.
• Support systems throughout their lifecycle in alignment with FISMA.

Skills

RMF

NIST SP 800-37

NIST SP 800-53

SCA-R

Risk analysis

C&A/A&A

eMASS

HBSS/ESS

STIG/SRG

Travel willingness

Education

Bachelor's degree in IT-related field

Tools

eMASS

STIG Viewer

Nessus

ACAS

SCAP

HBSS

Job description

Leidos seeks multiple SCA-R Validators to assess programs’ security posture, develop reports, and recommend improvements. Roles are primarily on-site with possible travel up to 50% to align with assessment teams across Alexandria, Fort Meade, and Chambersburg.

Candidates should hold a TS clearance with SCI eligibility, IAM II/IAT II, and 5+ years in C&A/A&A, with strong RMF, STIG/SRG, and NIST knowledge. Per diem is provided while traveling.