Security Control Assessor – Cloud, RMF & IC Standards

Footbridge Federal; Rockville, Northern (MD, KY); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health and Financial Foundation

Time Away and Flexibility WhereMission

Professional Development

Job summary

Footbridge Federal is seeking a highly qualified cybersecurity professional to execute comprehensive security control assessments across networks, applications, and cloud platforms. You will conduct vulnerability scans, analyze risks, draft test plans, and present findings to government stakeholders with strong emphasis on RMF and NIST frameworks.

Required are an active TS/SCI with CI polygraph, DoD 8570.01-M IAT Level III certs, and 3+ years of cybersecurity experience including cloud

Qualifications

• Active TS/SCI clearance with a CI polygraph is required.
• DoD 8570.01-M IAT Level III baseline certification (e.g., CISSP, CASP+ CE, CISA, GCED, GCIH, CCSP, or CCNP Security).
• At least 3 years of cybersecurity experience, including 1+ years of SCA experience under RMF, ICD 503, CNSSI 1253, or NIST frameworks.
• Minimum 3 years of cloud security assessments (AWS, Azure, GCP).
• Bachelor's degree in a technical field or 4 years of experience in lieu of a degree.
• Strong understanding of vulnerability scanning, TCP/IP, DNS, IAM, and PKI.
• Familiarity with MITRE ATT&CK and adversary tactics.

Responsibilities

• Execute comprehensive security control assessments (SCAs) on networks, applications, and cloud platforms.
• Conduct vulnerability scans, analyze technical risks, and recommend actionable mitigation strategies.
• Draft detailed assessment reports, test plans, and penetration testing rules of engagement.
• Present and defend technical findings to government stakeholders and cybersecurity leadership.
• Review system architectures to ensure compliance with federal and intelligence community standards.

Skills

TS/SCI clearance

CI Polygraph

DoD 8570.01-M IAT Level III

Cybersecurity

SCA

RMF

NIST frameworks

MITRE ATT&CK

Vulnerability scanning

TCP/IP & DNS

IAM

PKI

Education

Bachelor's degree in a technical field

Job description

Footbridge Federal is seeking a highly qualified cybersecurity professional to execute comprehensive security control assessments across networks, applications, and cloud platforms. You will conduct vulnerability scans, analyze risks, draft test plans, and present findings to government stakeholders with strong emphasis on RMF and NIST frameworks.

Required are an active TS/SCI with CI polygraph, DoD 8570.01-M IAT Level III certs, and 3+ years of cybersecurity experience including cloud