Security Control Assessor – DoD A&A & Cloud

Peraton; Linthicum (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Peraton in Linthicum, MD is seeking a Security Control Assessor to support a DoD customer. The role involves leading risk assessments, A&A activities, and security plan updates across DoD cloud infrastructure.

The successful candidate will apply NIST and RMF methodologies, review scans, and guide privacy and compliance initiatives while collaborating with a high-performing team in a dynamic cyber operations environment.

Qualifications

• Bachelor’s or higher with 8+ years experience, or advanced degrees with fewer years.
• Active TS clearance with SCI eligibility and CompTIA Security+ and IAM III certifications.
• Knowledge of enterprise cloud environments (JWICS, SIPRNET, NIPRNET, commercial Internet).
• Experience with NIST, FISMA, HIPAA, and PII governance and RMF processes.

Responsibilities

• Conduct assessments and facilitate risk mitigation planning.
• Provide A&A for the ARCYBER cloud infrastructure.
• Execute a security control assessment plan and update the System Security Plan.
• Review vulnerability scans and remediation.
• Implement risk management programs per NIST, FISMA, HIPAA, and PII guidelines.
• Monitor the privacy landscape for data protection and residency.
• Assist clients in identifying gaps within privacy programs and designing solutions.
• Scan, test, and validate systems/networks/applications to obtain/maintain an ATO under NIST/FISMA.

Skills

TS clearance

Cybersecurity

Cloud security

Risk assessment

NIST/FISMA knowledge

Vulnerability assessment

Security certifications

Network security

Analytical skills

Education

Bachelor’s degree in a related field

Master’s degree in a related field

PhD in a related field

4+ years relevant experience in lieu of degree

Tools

eMASS

ACAS

ISC2 CCSP

CISSP

Cloud+

IAM

Job description

Peraton in Linthicum, MD is seeking a Security Control Assessor to support a DoD customer. The role involves leading risk assessments, A&A activities, and security plan updates across DoD cloud infrastructure.

The successful candidate will apply NIST and RMF methodologies, review scans, and guide privacy and compliance initiatives while collaborating with a high-performing team in a dynamic cyber operations environment.