Security Controls Assessor (2 openings)

Footbridge Federal; Annandale (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health benefits

PTO & leave

Professional development

Job summary

Footbridge Federal delivers engineering, cyber, mission IT, analytics, and cleared program support for defense, intelligence, federal civilian, homeland security, and research missions.

Footbridge Federal seeks an experienced security professional to conduct assessments, author compliance docs, and support incident investigations. The role requires RMF expertise, TS/SCI familiarity, and strong Windows/RHEL/Active Directory skills.

Qualifications

• 4+ years of experience in system security configuration, assessment, or administration (SCA, ISSO, ISSE, or SysAdmin background).
• Strong technical background with enterprise operating systems, networking components, and core services (Windows, RHEL, Active Directory).
• Hands-on RMF experience in DoD or Intelligence Community environments.
• Proficiency with enterprise security tools such as ACAS and vulnerability management platforms.

Responsibilities

• Conduct technical security assessments and analyze system weaknesses to formulate effective remediation strategies.
• Author and update key compliance documentation, including Security Assessment Reports, System Security Plans, and POAMs.
• Assist with security incident investigations, resolution tracking, and post-incident documentation.
• Review enterprise architecture changes, software additions, and hardware implementations for security compliance.
• Present technical findings and cybersecurity risk assessments to executive management and leadership teams.

Skills

SCA/ISSO/ISSE/SysAdmin

Windows RHEL Active Directory

RMF implementation

Security risk assessment

DoD/Intelligence Community

Education

Advanced degree in technical or cybersecurity field

DoD 8140/CSWF guidelines knowledge

Tools

ACAS

Vulnerability management tools

ServiceNow CAM

Job description

• Conduct technical security assessments and analyze system weaknesses to formulate effective remediation strategies.
• Author and update key compliance documentation, including Security Assessment Reports, System Security Plans, and POAMs.
• Assist with security incident investigations, resolution tracking, and post-incident documentation.
• Review enterprise architecture changes, software additions, and hardware implementations for security compliance.
• Present technical findings and cybersecurity risk assessments to executive management and leadership teams.

Minimum Qualifications

• 4+ years of experience in system security configuration, assessment, or administration (SCA, ISSO, ISSE, or SysAdmin background).
• Strong technical background with enterprise operating systems, networking components, and core services (Windows, RHEL, Active Directory).
• Hands-on experience implementing the Risk Management Framework (RMF) within DoD or Intelligence Community environments.
• Proficiency with enterprise security tools such as ACAS and vulnerability management platforms.
• Active TS/SCI security clearance with the ability to pass a Counterintelligence (CI) Polygraph.
• Compliance with DoD 8140/CSWF guidelines for Intermediate level roles (or ability to achieve certification within 6 months).

Preferred Qualifications

• Experience utilizing ServiceNow CAM for compliance and risk management tracking.
• Advanced degree in a technical or cybersecurity-related field.

Required Skills

• 4+ years of experience in system security configuration, assessment, or administration (SCA, ISSO, ISSE, or SysAdmin background).
• Strong technical background with enterprise operating systems, networking components, and core services (Windows, RHEL, Active Directory).
• Hands-on experience implementing the Risk Management Framework (RMF) within DoD or Intelligence Community environments.
• Proficiency with enterprise security tools such as ACAS and vulnerability management platforms.
• Active TS/SCI security clearance with the ability to pass a Counterintelligence (CI) Polygraph.
• Compliance with DoD 8140/CSWF guidelines for Intermediate level roles (or ability to achieve certification within 6 months).

Preferred Skills

• Experience utilizing ServiceNow CAM for compliance and risk management tracking.
• Advanced degree in a technical or cybersecurity-related field.

Security Clearance

• Level: TS/SCI

Travel or Schedule

• Up to 10% annual travel required.

On-site work arrangement. Up to 10% annual travel required.

• Health and Financial Foundation — Medical, dental, vision, retirement, life insurance, disability coverage, and flexible spending accounts are described in the benefits page.
• Time Away and Flexibility Where Mission Permits — PTO, holidays, sick time, military leave, and flexible arrangements are supported where program and security requirements allow.
• Professional Development — The site references certification support, training, conferences, mentorship, internal mobility, and individual development planning.

Mission

Footbridge Federal delivers engineering, cyber, mission IT, analytics, and cleared program support for defense, intelligence, federal civilian, homeland security, and research missions.

Culture

Mission Context Matters

Candidates should expect work tied to defense, intelligence, federal civilian, homeland, and research missions rather than generic commercial delivery.

Small-Team Accountability

The culture copy emphasizes ownership, communication, and practical execution across teams that work close to customers and program outcomes.

Growth With Technical Credibility

Career content supports hands-on technical growth, certifications, internal mobility, and program leadership without forcing one career track.

Benefits & why work here

• Health and Financial Foundation: Medical, dental, vision, retirement, life insurance, disability coverage, and flexible spending accounts are described in the benefits page.
• Time Away and Flexibility Where Mission Permits: PTO, holidays, sick time, military leave, and flexible arrangements are supported where program and security requirements allow.
• Professional Development: The site references certification support, training, conferences, mentorship, internal mobility, and individual development planning.