Security Control Assessor | DoD Cyber Risk & A&A Expert

VulnU; Linthicum (MD); On-site; USD 135,000 - 216,000; Full time

Benefits offered by this job

25 days PTO

Job summary

Peraton is seeking a Security Control Assessor to support a DoD customer in Linthicum, MD. The role focuses on risk mitigation, A&A for ARCYBER cloud infrastructure, and continual security improvement. A TS clearance with SCI eligibility is required, along with Security+ and IAM level III certifications.

The position involves assessing systems, reviewing scans, and applying NIST/FISMA-compliant processes to maintain ATO status while addressing privacy and regulatory considerations.

Qualifications

• Bachelor’s degree and 8+ years of experience, or Master’s with 6+ years.
• Active TS clearance with SCI eligibility is required.
• Active Security+ and IAM level III (e.g., CISM) certifications preferred.

Responsibilities

• Conduct assessments and facilitate risk mitigation planning.
• Provide A&A for the ARCYBER cloud infrastructure.
• Review vulnerability scans and remediation.
• Implement risk management programs per NIST, FISMA, HIPAA and PII requirements.
• Monitor the privacy landscape across data protection and residency.
• Assist clients in identifying gaps in privacy programs and design solutions.
• Scan, test, and validate systems to obtain/maintain an ATO under NIST/FISMA.

Skills

Security controls

NIST

A&A process

Cloud computing

Vulnerability management

Education

Bachelor’s degree in IT / CS / Cybersecurity

Master’s degree or PhD in related field

Tools

eMASS

ACAS

CCSP / Cloud+

Job description

Peraton is seeking a Security Control Assessor to support a DoD customer in Linthicum, MD. The role focuses on risk mitigation, A&A for ARCYBER cloud infrastructure, and continual security improvement. A TS clearance with SCI eligibility is required, along with Security+ and IAM level III certifications.

The position involves assessing systems, reviewing scans, and applying NIST/FISMA-compliant processes to maintain ATO status while addressing privacy and regulatory considerations.