Security Control Assessor

MANTECH; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

ManTech is seeking a Senior Security Control Assessor (SCA) to join our team in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL. The successful candidate will provide expert security assessment and authorization (SAA) guidance, configuration management, and baseline security control support to safeguard critical intelligence and operational systems.

Responsibilities include integrity of CM, SAA package management, SSP reviews, testing level negotiation, interconnection

Qualifications

• 7+ years as ISSR or similar in a cleared facility.
• 10+ years in computer science or cybersecurity fields.
• DoD 8140/8570 compliant certification(s) required.

Responsibilities

• Provide security assessment and authorization guidance for FBI ISs.
• Manage configuration and baseline security controls with SAA packages.
• Coordinate ISAs, MOUs, and ISPs for interconnection agreements.
• Review SSPs and negotiate testing levels with officials.
• Coordinate inspections, tests, and SAA package submissions.

Skills

Information security

Cybersecurity

Clearance knowledge

Education

Bachelor's degree or higher in CS/Cybersecurity

Tools

Tenable Nessus

NMAP

IBM Guardium

HP Web Inspect

Job description

Position Summary

ManTech is seeking a motivated, career, and customer-oriented

Senior Security Control Assessor (SCA) to join our team in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL. The successful candidate will provide expert security assessment and authorization (SAA) guidance, configuration management, and baseline security control support to safeguard critical intelligence and operational systems.

Responsibilities

• Configuration Management & Strategy: Provide overall configuration management (CM) infrastructure and environment support to the product development team. Develop or modify CM plans, policies, and procedures tailored to the complexity and scope of developmental and operational systems.
• SAA & Compliance Management: Ensure FBI Information Systems (ISs) are operated, maintained, and disposed of in accordance with internal security policies and approved Security Assessment and Authorization (SAA) packages. Manage the SAA process for new and legacy FBI ISs migrating into the GRC application.
• Security Control Baseline & Impact Recommendation: Provide baseline security controls to system owners based on system categorization, entity type, and processed information. Recommend system impact levels and authorization boundaries to the Authorizing Official in consultation with system owners.
• Interconnection Governance: Initiate, coordinate, and recommend Interconnection Security Agreements (ISAs), Memoranda of Understanding (MOUs), and Memoranda of Agreement (MOAs) permitting interconnection between FBI ISs and non-FBI or joint-use systems.
• System Security Plan (SSP) & Testing: Perform independent reviews of System Security Plans (SSPs) and make approval decisions. Negotiate required testing levels for ISs with the Enterprise Information Security Section and the FBI Authorizing Official.
• Inspections & Audits: Coordinate security inspections, tests, and reviews with security personnel and system owners. Submit final SAA packages to the FBI Authorizing Official for ATO decisions. Maintain configuration baselines, perform change control, and conduct configuration audits for developmental and operational systems.
• Risk Advisory & Documentation: Ensure Security ATO Electronic Communications (ECs) are serialized into Sentinel under applicable case file numbers. Advise the FBI Authorizing Official of IS vulnerabilities and residual risks.

Experience

Minimum Qualifications

• Minimum of 7 years serving as an Information System Security Representative (ISSR) or in a similar role at a cleared facility.
• Minimum of 10 years of experience in computer science or cybersecurity-related fields.
• Certifications: Must hold at least one (1) DoD 8140/8570 compliant certification:
• CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CISSP-ISSAP, CySA+, GSLC, GSNA, CCNP Enterprise, GCIA, GDSA, or GICSP.
• Technical Skills: Hands‑on experience with security evaluation and vulnerability assessment tools, including Tenable Nessus / Security Center, IBM Guardium, HP Web Inspect, Network Mapper (NMAP), or similar applications.

Preferred Qualifications

• Bachelor’s or advanced degree in Computer Science, Cybersecurity, or a related cyber discipline.

Clearance Requirements

• Must possess an active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting.
• Must be willing to sit for a polygraph examination if required.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and printer.
• Often positions self to maintain computers in the lab, including under desks and in server closets.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.