RMF Security Controls Assessor — TS/SCI

VulnU; Herndon (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking a Security Control Assessor to evaluate security controls, perform RMF-guided assessments, and deliver authoritative recommendations that inform authorization decisions. The role requires experience with NIST SP 800-53, security control assessments, and a TS/SCI clearance with polygraph.

You will conduct risk assessments, validate documentation, and guide stakeholders through RMF while leveraging cloud security knowledge to strengthen overall security posture for

Qualifications

• 5 years of experience with NIST SP 800-53 and RMF.
• Experience conducting security control assessments, including documentation review, interviews, and technical testing.
• Knowledge of technology security controls and the network accreditation process.
• TS/SCI clearance with a polygraph.
• HS diploma or GED.

Responsibilities

• Perform security control assessments across complex systems and document results.
• Review and validate the effectiveness of security controls to inform authorization decisions.
• Guide stakeholders through RMF processes and provide authoritative recommendations.
• Identify and document deficiencies, and assess residual risk.
• Leverage cloud knowledge to assess security postures and enable authorization decisions.

Skills

NIST SP 800-53

Security control assessments

RMF guidance

Security documentation

Communication with senior management

Education

HS diploma or GED

Tools

Xacta

Nessus

Rapid7

Nipper

AWS

Microsoft Azure

Google Cloud

Oracle Cloud

Job description

Booz Allen Hamilton is seeking a Security Control Assessor to evaluate security controls, perform RMF-guided assessments, and deliver authoritative recommendations that inform authorization decisions. The role requires experience with NIST SP 800-53, security control assessments, and a TS/SCI clearance with polygraph.

You will conduct risk assessments, validate documentation, and guide stakeholders through RMF while leveraging cloud security knowledge to strengthen overall security posture for