Security Control Assessor

Footbridge Federal; Rockville, Northern (MD, KY); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health and Financial Foundation

Time Away and Flexibility WhereMission

Professional Development

Job summary

Footbridge Federal is seeking a highly qualified cybersecurity professional to execute comprehensive security control assessments across networks, applications, and cloud platforms. You will conduct vulnerability scans, analyze risks, draft test plans, and present findings to government stakeholders with strong emphasis on RMF and NIST frameworks.

Required are an active TS/SCI with CI polygraph, DoD 8570.01-M IAT Level III certs, and 3+ years of cybersecurity experience including cloud

Qualifications

• Active TS/SCI clearance with a CI polygraph is required.
• DoD 8570.01-M IAT Level III baseline certification (e.g., CISSP, CASP+ CE, CISA, GCED, GCIH, CCSP, or CCNP Security).
• At least 3 years of cybersecurity experience, including 1+ years of SCA experience under RMF, ICD 503, CNSSI 1253, or NIST frameworks.
• Minimum 3 years of cloud security assessments (AWS, Azure, GCP).
• Bachelor's degree in a technical field or 4 years of experience in lieu of a degree.
• Strong understanding of vulnerability scanning, TCP/IP, DNS, IAM, and PKI.
• Familiarity with MITRE ATT&CK and adversary tactics.

Responsibilities

• Execute comprehensive security control assessments (SCAs) on networks, applications, and cloud platforms.
• Conduct vulnerability scans, analyze technical risks, and recommend actionable mitigation strategies.
• Draft detailed assessment reports, test plans, and penetration testing rules of engagement.
• Present and defend technical findings to government stakeholders and cybersecurity leadership.
• Review system architectures to ensure compliance with federal and intelligence community standards.

Skills

TS/SCI clearance

CI Polygraph

DoD 8570.01-M IAT Level III

Cybersecurity

SCA

RMF

NIST frameworks

MITRE ATT&CK

Vulnerability scanning

TCP/IP & DNS

IAM

PKI

Education

Bachelor's degree in a technical field

Job description

• Execute comprehensive security control assessments (SCAs) on networks, applications, and cloud platforms.
• Conduct vulnerability scans, analyze technical risks, and recommend actionable mitigation strategies.
• Draft detailed assessment reports, test plans, and penetration testing rules of engagement.
• Present and defend technical findings to government stakeholders and cybersecurity leadership.
• Review system architectures to ensure compliance with federal and intelligence community standards.

Minimum Qualifications

• Active TS/SCI clearance with a Counterintelligence (CI) Polygraph.
• DoD 8570.01-M IAT Level III baseline certification (e.g., CISSP, CASP+ CE, CISA, GCED, GCIH, CCSP, or CCNP Security).
• At least 3 years of cybersecurity experience, including 1+ years of SCA experience under RMF, ICD 503, CNSSI 1253, or NIST frameworks.
• Minimum 3 years of experience conducting security assessments within cloud environments (such as AWS, Azure, or Google Cloud).
• Bachelor's degree in a technical field (or 4 additional years of experience in lieu of a degree).
• Strong understanding of vulnerability scanning, network protocols (TCP/IP, DNS), IAM, and PKI.
• Familiarity with the MITRE ATT&CK framework and adversary tactics.

Required Skills

• Active TS/SCI clearance with a Counterintelligence (CI) Polygraph.
• DoD 8570.01-M IAT Level III baseline certification (e.g., CISSP, CASP+ CE, CISA, GCED, GCIH, CCSP, or CCNP Security).
• At least 3 years of cybersecurity experience, including 1+ years of SCA experience under RMF, ICD 503, CNSSI 1253, or NIST frameworks.
• Minimum 3 years of experience conducting security assessments within cloud environments (such as AWS, Azure, or Google Cloud).
• Bachelor's degree in a technical field (or 4 additional years of experience in lieu of a degree).
• Strong understanding of vulnerability scanning, network protocols (TCP/IP, DNS), IAM, and PKI.
• Familiarity with the MITRE ATT&CK framework and adversary tactics.

Security Clearance

• Level: TS/SCI

Work Arrangement: On-site

• Health and Financial Foundation — Medical, dental, vision, retirement, life insurance, disability coverage, and flexible spending accounts are described in the benefits page.
• Time Away and Flexibility Where Mission Permits — PTO, holidays, sick time, military leave, and flexible arrangements are supported where program and security requirements allow.
• Professional Development — The site references certification support, training, conferences, mentorship, internal mobility, and individual development planning.

About Footbridge

Mission

Footbridge Federal delivers engineering, cyber, mission IT, analytics, and cleared program support for defense, intelligence, federal civilian, homeland security, and research missions.

Culture

Mission Context Matters

Candidates should expect work tied to defense, intelligence, federal civilian, homeland, and research missions rather than generic commercial delivery.

Small-Team Accountability

The culture copy emphasizes ownership, communication, and practical execution across teams that work close to customers and program outcomes.

Growth With Technical Credibility

Career content supports hands‑on technical growth, certifications, internal mobility, and program leadership without forcing one career track.

Benefits & why work here

• Health and Financial Foundation: Medical, dental, vision, retirement, life insurance, disability coverage, and flexible spending accounts are described in the benefits page.
• Time Away and Flexibility Where Mission Permits: PTO, holidays, sick time, military leave, and flexible arrangements are supported where program and security requirements allow.
• Professional Development: The site references certification support, training, conferences, mentorship, internal mobility, and individual development planning.