Security Operations & Assessment Engineer

Aderas,-Inc; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Pay for Life

AD&D insurance

Short/Long-term disability insured

Employer health insurance premium

401k plan

Safe Harbor 3% contribution

Paid training & course reimbursement

Job summary

Aderas is seeking a Security Operations & Assessment Engineer to join our security team in a hybrid Washington, DC location. You will evaluate security controls, review SSPs/SAPs/Risk Assessments, and lead POA&M tracking to support ATO decisions. The role requires RMF familiarity, FISMA knowledge, and federal policy experience.

Ideal candidates possess a bachelor's degree or higher in a related field, and relevant certifications. 5–6+ years IT experience with advanced degrees qualifies.

Qualifications

• Bachelor's degree or higher in information systems management, IT, cybersecurity, CS, business, engineering or related discipline.
• Active industry certifications preferred (CISSP, CGRC, CISA, CEH, SSCP).
• 5 years IT experience with a master's degree or 6 years with a bachelor's.

Responsibilities

• Evaluate controls against NIST SP 800-53 Rev. 5 and NIST SP 800-53A.
• Review SSPs, SAPs, risk assessments, contingency plans and PIAs.
• Analyze vulnerability scans and configuration baselines (DISA STIGs, CIS).
• Compile SAR detailing deficiencies, residual risks and impacts.
• Track POA&Ms and remediation efforts.
• Lead entrance/exit briefings with System Owners, ISSOs and ISSM.
• Provide data to AO for ATO decisions.
• Support FedRAMP and federal continuous monitoring requirements.

Skills

RMF familiarity

FISMA compliance

Federal policies

Education

Bachelor's degree or higher

Master's degree preferred

Job description

Aderas is seeking a Security Operations & Assessment Engineer to join the team.

Primary Job Duties:

• Evaluate management, operational, and technical security controls against standards like NIST SP 800-53 (Rev. 5) and NIST SP 800-53A.
• Examine System Security Plans (SSPs), Security Assessment Plans (SAPs), Risk Assessments, Contingency Plans, and Privacy Impact Assessments (PIAs) for accuracy and completeness.
• Analyze vulnerability scan reports, configuration settings (such as DISA STIGs or CIS benchmarks), and network/data flow diagrams to verify real-world implementation.
• Compile results into a formal Security Assessment Report (SAR), detailing control deficiencies, residual risks, and impact levels.
• Track Remediation & POA&Ms: Help evaluate and track Plans of Action and Milestones (POA&Ms) established to fix identified vulnerabilities.
• Lead assessment entrance/exit briefings and work directly with System Owners, Information System Security Officers (ISSOs), and Information System Security Manager (ISSM).
• Provide objective technical data to support the Authorizing Official (AO) in granting or denying an Authorization to Operate (ATO).
• Support continuous monitoring and adaptation to agency-specific continuous monitoring strategies to align with FedRAMP 20x. and other compliance requirements.

Required Experience/Skills

• Deep familiarity with the NIST Risk Management Framework (RMF) (NIST SP 800-37), FISMA requirements, and federal cybersecurity policies.
• Multiple years of experience in cybersecurity, system auditing, or security engineering.

Required Education & Work Experience:

• Bachelors degree or higher in Information Systems Management, Information Technology, Cybersecurity, Computer Science, Business, Management, Engineering, or another related discipline
• Active industry certifications is preferred (common examples include CISSP, CGRC, CISA, CEH, or SSCP).
• Min. Five (5) years of professional IT experience with a master’s degree OR six (6) years of experience with a bachelor’s degree

Clearance/Citizenship:

U.S. Citizen with Secret/T3 clearance

Location:

Hybrid in Washington, DC

Join the Aderas team!

Aderas is looking to recruit and retain only the best and brightest. If you like working with emerging technologies, using your unique personal skills to solve technical, functional, and organizational issues, and can easily adapt to the ever-changing IT market, then Aderas is the place for you! We are a vibrant company delivering implementation services & support for enterprise solutions and custom application development. We strive to form long-term partnerships with our clients to foster an environment based on trust, a proven history of delivery, and camaraderie.

Why Aderas?

We sincerely try to shape our employees' lives by administering a generous package of employee benefits. Our company culture encourages collaboration, creative thinking, and growth.

Beyond the tangible and intangible rewards, Aderas provides the following:

• Pay for Life, AD&D, Short-term disability, and Long-term disability at no cost to the employee.
• Employer contribution toward monthly health insurance premiums.
• 401k plan which employees are eligible for after being with the company for 3 months.
• Safe Harbor plan in which Aderas contributes 3% of employees' salaries once a year.
• A week of paid training and reimbursement for approved professional courses and tests.