Senior ISSE: RMF & Security Control Expert

Peraton; Washington (District of Columbia); On-site; USD 146,000 - 234,000; Full time

Job summary

Peraton is seeking an Information Systems Security Engineer – Security Control Assessors (SCA) to support Federal Strategic Cyber programs in Washington, DC. You will assess security controls, review documentation, and coordinate with system owners, ISSEs, and ISSOs to maintain high-quality deliverables throughout the RMF lifecycle.

Responsibilities include monitoring across the ISSM portfolio, guiding categorization, and ensuring proper risk management documentation for system authorization.

Qualifications

• Bachelor’s degree and 8 years of experience in secure design, analysis, and test of information security systems and products.
• DoD 8140.03 Advanced proficiency aligned to Security Control Assessor (Work Role 612).
• Must have a CISSP or CEH and 1 of the listed certifications (or an advanced degree).
• Active TS/SCI security clearance with the ability to obtain a polygraph.

Responsibilities

• Assess security controls for accuracy and evidence.
• Review system documentation and accept/reject documents.
• Coordinate with System Owner, ISSE, and ISSO to fix items.
• Monitor systems across ISSM portfolio for quality in RMF lifecycle.
• Oversee and coordinate Prepare step activities with defined roles and risk strategies.
• Guide system categorization based on impact and regulatory requirements.
• Advise on selection, tailoring, and documentation of security controls.
• Oversee lifecycle implementation of technical, operational, and management controls.
• Plan, execute, and document comprehensive security control assessments.
• Prepare risk management documentation for system authorization.
• Direct ongoing monitoring and continuous assessment with leadership metrics.
• Provide cybersecurity guidance and training to team and stakeholders.
• Report status, risks, and improvement opportunities to leadership.
• Maintain knowledge of RMF, NIST guidance, and best practices.

Skills

Active TS/SCI clearance with poly

Education

Bachelor's degree in information security or related field

DoD 8140.03 Advanced proficiency for Security Control Assessor (Work Role 612)

CISSP

CEH

CCNP Enterprise

CISM

CISSP-ISSAP

CISSP-ISSEP

GCIA

GDSA

GICSP

Cloud certification (preferred)

Tools

N/A

Job description

Peraton is seeking an Information Systems Security Engineer – Security Control Assessors (SCA) to support Federal Strategic Cyber programs in Washington, DC. You will assess security controls, review documentation, and coordinate with system owners, ISSEs, and ISSOs to maintain high-quality deliverables throughout the RMF lifecycle.

Responsibilities include monitoring across the ISSM portfolio, guiding categorization, and ensuring proper risk management documentation for system authorization.