SCA-R & RMF Cyber Risk Validator

Leidos Inc; Chambersburg (Franklin County); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking multiple SCA-R Validators to assess programs' security posture and develop reports and recommendations for improvement. These positions can be based out of Alexandria, VA, Fort Meade, MD, or Chambersburg, PA.

Positions are primarily on-site with up to 50% travel and per diem on travel. Responsibilities include using government tools, conducting RMF tasks, risk analyses, and reporting to the AO.

Qualifications

• Bachelor's degree in an IT-related field and eight years of cybersecurity or network security experience.
• Active DoD Top Secret clearance with SCI eligibility required.
• Current DoD 8570 IAM II or IAT II certification.
• Five years of experience in a Certification and Accreditation/A&A role.
• Demonstrated experience with STIGs, SRGs, POA&Ms and cybersecurity best practices.
• Advanced understanding of RMF, NIST SP 800-37, 800-53, CNSSI 1253.
• Demonstratable experience in risk analysis, control validation, and as a Security Control Assessor Representative (SCA-R).
• Experience with eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS.
• Knowledge of networks, mobility, Windows, UNIX, Cloud Environments and HBSS/ESS.
• Customer service skills.
• Ability and willingness to travel for assessments as required.

Responsibilities

• Use government-assigned tools to perform weekly updates, maintain records, and complete tasks.
• Coordinate with ISSMs and PMOs to understand mission and business functions, security architecture, deployment locations, and planned changes.
• Conduct cybersecurity assessments, risk analyses and authorization tasks across RMF steps.
• Verify authorization boundaries and categorize systems (FIPS199).
• Identify data classifications and conduct system-level risk assessments.
• Track system changes, assess impacts, and report updates to the AO.
• Evaluate authorization and change requests, web filtering, firewall exceptions, ports/protocols, cybersecurity risks, STIG/SRG compliance, and on-site security.
• Lead assessment visits, briefings, and ensure proper documentation and reporting.
• Attend required government training and meetings to stay updated.
• Maintain access and proficiency in government databases and cybersecurity tools.
• Assess threats, vulnerabilities and cybersecurity risk for systems and compile findings into authorization packages.
• Support assigned systems throughout their lifecycle in alignment with FISMA requirements.
• Submit weekly activity reports summarizing tasks, tracking IDs, and key updates.

Skills

Customer service skills

Willingness to travel

Attention to detail

Education

Bachelor's degree in IT-related field

Tools

eMASS

STIG Viewer

Nessus

ACAS

SCAP

HBSS

Job description

Leidos is seeking multiple SCA-R Validators to assess programs' security posture and develop reports and recommendations for improvement. These positions can be based out of Alexandria, VA, Fort Meade, MD, or Chambersburg, PA.

Positions are primarily on-site with up to 50% travel and per diem on travel. Responsibilities include using government tools, conducting RMF tasks, risk analyses, and reporting to the AO.