SCA-R Security Assessor & RMF Validator

Leidos Inc; Alexandria (VA); On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

Per diem while travel

On-site work

Travel up to 50%

Job summary

Leidos is seeking multiple SCA-R Validators to assess programs' security posture and develop improvement reports. Roles are primarily on-site in Alexandria, VA, Fort Meade, MD, or Chambersburg, PA with up to 50% travel and per diem while traveling.

Minimum qualifications include a TS clearance with SCI eligibility, IAM II/IAT II, 8 years in cybersecurity, and RMF/SCCP experience. Responsibilities cover RMF tasks across A&A and active reporting throughout engagement.

Qualifications

• Bachelor's degree in an IT-related field and eight years in cybersecurity or network security; degree may be waived with equivalent experience.
• Active DoD Top Secret clearance with SCI eligibility.
• DoD 8570 IAM II or IAT II certification.
• Five years in Certification and Accreditation/A&A.
• Experience with STIGs, SRGs, POA&Ms and cybersecurity best practices.

Responsibilities

• Perform cybersecurity assessments and risk analyses across RMF steps using approved tools.
• Identify data classifications and conduct system-level risk assessments.
• Lead assessment visits, briefings, and maintain documentation and reporting.
• Submit weekly activity reports with tracking IDs and updates.
• Support systems lifecycle in alignment with FISMA requirements.
• Travel as required to support assessment teams.

Skills

Cybersecurity

Risk Analysis

SCA-R / RMF

Communication

Travel readiness

Education

Bachelor's degree in IT-related field

Tools

eMASS

STIG Viewer

Nessus

ACAS

SCAP

HBSS

Job description

Leidos is seeking multiple SCA-R Validators to assess programs' security posture and develop improvement reports. Roles are primarily on-site in Alexandria, VA, Fort Meade, MD, or Chambersburg, PA with up to 50% travel and per diem while traveling.

Minimum qualifications include a TS clearance with SCI eligibility, IAM II/IAT II, 8 years in cybersecurity, and RMF/SCCP experience. Responsibilities cover RMF tasks across A&A and active reporting throughout engagement.