Security Control Assessor

MANTECH; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

ManTech in the United States seeks a Senior Security Control Assessor to provide expert SAA guidance, configuration management, and security baseline support for critical systems in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL.

The role requires extensive experience with security evaluation, IS policy compliance, and risk assessment, plus DoD 8140/8570 certifications. Active TS clearance and SCI eligibility preferred.

Qualifications

• Minimum 7 years as ISSR or similar in a cleared facility.
• Minimum 10 years of experience in computer science or cybersecurity fields.
• DoD 8140/8570 compliant certification required.
• Relevant certifications: CCISO, CISA, CISM, CISSP, and others listed.

Responsibilities

• Provide CM infrastructure support and tailor CM plans for system development.
• Manage SAA processes and ensure FBI IS compliance with policies.
• Recommend security baselines and authorization boundaries.
• Coordinate ISAs, MOUs, and MOAs for interconnections.
• Review SSPs and negotiate testing levels with FBI officials.
• Coordinate inspections, audits, and final SAA package submissions.
• Advise on vulnerabilities and residual risk to the Authorizing Official.

Skills

Security assessment experience

Vulnerability assessment tools

Configuration management

Security controls

Education

DoD 8140/8570 compliant certifications

Bachelor’s degree in CS/Cybersecurity

Tools

Tenable Nessus

NMAP

Job description

Senior Security Control Assessor

Position Summary

ManTech is seeking a motivated, career, and customer-oriented Senior Security Control Assessor (SCA) to join our team in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL. The successful candidate will provide expert security assessment and authorization (SAA) guidance, configuration management, and baseline security control support to safeguard critical intelligence and operational systems.

Responsibilities

• Configuration Management & Strategy: Provide overall configuration management (CM) infrastructure and environment support to the product development team. Develop or modify CM plans, policies, and procedures tailored to the complexity and scope of developmental and operational systems.
• SAA & Compliance Management: Ensure FBI Information Systems (ISs) are operated, maintained, and disposed of in accordance with internal security policies and approved Security Assessment and Authorization (SAA) packages. Manage the SAA process for new and legacy FBI ISs migrating into the GRC application.
• Security Control Baseline & Impact Recommendation: Provide baseline security controls to system owners based on system categorization, entity type, and processed information. Recommend system impact levels and authorization boundaries to the Authorizing Official in consultation with system owners.
• Interconnection Governance: Initiate, coordinate, and recommend Interconnection Security Agreements (ISAs), Memoranda of Understanding (MOUs), and Memoranda of Agreement (MOAs) permitting interconnection between FBI ISs and non-FBI or joint-use systems.
• System Security Plan (SSP) & Testing: Perform independent reviews of System Security Plans (SSPs) and make approval decisions. Negotiate required testing levels for ISs with the Enterprise Information Security Section and the FBI Authorizing Official.
• Inspections & Audits: Coordinate security inspections, tests, and reviews with security personnel and system owners. Submit final SAA packages to the FBI Authorizing Official for ATO decisions. Maintain configuration baselines, perform change control, and conduct configuration audits for developmental and operational systems.
• Risk Advisory & Documentation: Ensure Security ATO Electronic Communications (ECs) are serialized into Sentinel under applicable case file numbers. Advise the FBI Authorizing Official of IS vulnerabilities and residual risks.

Minimum Qualifications

Experience:

• Minimum of 7 years serving as an Information System Security Representative (ISSR) or in a similar role at a cleared facility.
• Minimum of 10 years of experience in computer science or cybersecurity-related fields.
• Certifications: Must hold at least one (1) DoD 8140/8570 compliant certification:
• CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CISSP-ISSAP, CySA+, GSLC, GSNA, CCNP Enterprise, GCIA, GDSA, or GICSP.
• Technical Skills: Hands-on experience with security evaluation and vulnerability assessment tools, including Tenable Nessus / Security Center, IBM Guardium, HP Web Inspect, Network Mapper (NMAP), or similar applications.

Preferred Qualifications

• Bachelor’s or advanced degree in Computer Science, Cybersecurity, or a related cyber discipline.

Clearance Requirements

• Must possess an active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting.
• Must be willing to sit for a polygraph examination if required.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and printer.
• Often positions self to maintain computers in the lab, including under desks and in server closets.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.