Security Control Assessor

System High Corporation; Chantilly (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

System High Corporation is seeking a Cybersecurity Subject Matter Expert to provide expert-level cybersecurity analysis and assessment services. This position acts as a senior technical advisor specializing in integrating security throughout the system lifecycle, translating risks into actionable mission-impact statements.

The ideal candidate will have at least twelve years of experience in IT and cybersecurity engineering, hold necessary certifications, and possess a current Top-Secret clearance. This role requires some travel and offers a chance to guide the implementation of advanced security architectures.

Qualifications

• Minimum of twelve years of demonstrated experience in IT, cybersecurity engineering, and/or Assessment & Authorization.
• Proven hands-on experience with systems integration, enterprise networks, cloud computing systems, or Platform IT architectures.
• Active Top-Secret clearance with eligibility for SCI and SAP access.

Responsibilities

• Provides strategic cybersecurity guidance and participates in technical reviews.
• Conducts deep technical validation of security controls by reviewing vulnerability scans.
• Guides the adoption of DoD Zero Trust principles and evaluates Cross Domain Solutions.

Skills

IT cybersecurity engineering

Risk Management Framework (RMF)

Systems integration

Cloud computing systems

Security Control Assessor

Education

DoD 8140.01 compliant certification at IAT Level III or IAM Level III

Job description

Position Overview

A Cybersecurity Subject Matter Expert provides expert-level cybersecurity analysis, engineering, and assessment services for complex, multi-domain systems. This role acts as a senior technical advisor and Security Control Assessor (SCA), specializing in integrating security throughout the system lifecycle, translating technical risks into mission-impact statements, and guiding the implementation of advanced security architectures.

Principal Duties and Responsibilities

• Provides strategic cybersecurity guidance and participates in technical reviews (e.g., SRR, PDR, CDR) to ensure security is integrated from the initial design phase and throughout the system development lifecycle.
• Executes the Risk Management Framework (RMF) process, providing risk determinations and recommendations to the Authorizing Official (AO).
• As a Security Control Assessor (SCA), executes the RMF process across Federal, DoD, and IC policies. Provides continuous risk determinations and actionable recommendations directly to the AO.
• Conducts deep technical validation of security controls by reviewing vulnerability scans (e.g., ACAS/Nessus), STIG checklists, and penetration test reports to correlate findings with operational mission risk.
• Evaluates the security performance, integrity, and residual risk of diverse and complex architectures, including Platform IT, cloud environments, communication networks, and satellite control systems.
• Guides the adoption and implementation of DoD Zero Trust principles and provides specialized expertise in the design and evaluation of Cross Domain Solutions (CDS).
• Functions as a technical liaison between engineering teams, program leadership, and external government and industry partners.

Qualifications

• Requires a minimum of twelve (12) years of demonstrated experience in IT, cybersecurity engineering, and/or Assessment & Authorization (A&A).
• Must hold a current DoD 8140.01 compliant certification at IAT Level III or IAM Level III (e.g., CISSP, CISM, GSLC, CASP+ CE).
• Proven hands‑on experience with systems integration, enterprise networks, cloud computing systems, or Platform IT architectures.
• Ample experience with Special Access Program (SAP) and Sensitive Compartmented Information (SCI) systems preferred.

Travel Requirements

• Some travel is required.
• Required to travel to CONUS and/or OCONUS locations.
• Must have an active US passport for OCONUS travel.

Clearance

Must possess an active Top‑Secret clearance with eligibility for SCI and SAP access.

Additional Information

This job description is not designed to cover or contain all job duties required of the employee. There may be additional activities, duties, and responsibilities that are required for this position not listed in this job description. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document upon hire.

Equal Employment Opportunity

System High Corporation is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran status or any other characteristic protected by law.