Senior Federal Security RMF Assessor (On-site DC)

Quantum Sky; Washington (District of Columbia); On-site; USD 115,000 - 130,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking a Security Control Assessor (Mid) to support a federal customer in Washington, DC. You will evaluate information systems for RMF compliance, documenting objective evidence and communicating risk clearly to stakeholders.

You will produce high-quality assessment deliverables, develop assessment plans, and conduct risk analyses per NIST standards. The role requires strong writing, collaboration with technical teams, and on-site work in DC.

Qualifications

• Bachelor's degree and at least four years of cybersecurity/GRC experience within RMF lifecycle.
• PMP, ISO 27001, or CISM certifications equate to 3 years of experience each.
• ITIL, CISSP, or other IT management certifications equate to 2 years of general experience each.
• Thorough knowledge of FISMA, RMF, SA&A processes and NIST SP 800-53 Rev. 5/800-137.
• Excellent technical writing and ability to communicate risk clearly.

Responsibilities

• Support RMF steps 4–assess, 5–authorize, and 6–monitor controls with system assessments.
• Produce quality, subject-system specific assessment deliverables.
• Develop and execute a security and privacy assessment plan for each project.
• Create and maintain test cases for security assessment testing.
• Perform security testing at control-requirement level for components.
• Review vulnerability scan/penetration/test reports and analyze findings.
• Determine residual risk or false positives from reports and artifacts.
• Document findings with concise, actionable recommendations and risk analysis per NIST SP 800-30.

Skills

Analytical thinking

Risk communication

Technical writing

Team collaboration

Security assessment expertise

Education

Bachelor's degree

PMP

ISO 27001

CISM

ITIL

CISSP

CAP

CRISC

Tools

ServiceNow

CSAM

Job description

Quantum Sky is seeking a Security Control Assessor (Mid) to support a federal customer in Washington, DC. You will evaluate information systems for RMF compliance, documenting objective evidence and communicating risk clearly to stakeholders.

You will produce high-quality assessment deliverables, develop assessment plans, and conduct risk analyses per NIST standards. The role requires strong writing, collaboration with technical teams, and on-site work in DC.