Senior Security Control Assessor – RMF/NIST Expert (TS/SCI)

Peraton; Washington (District of Columbia); On-site; USD 112,000 - 179,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

401(k)

Paid time off

Parental leave

Employee assistance program

Holiday pay

Job summary

Peraton is seeking a qualified Security Control Assessor (SCA) to evaluate security controls in information systems and ensure compliance with federal cybersecurity policies. The role requires RMF experience, NIST 800-53 knowledge, and collaboration with government stakeholders in a classified environment.

The SCA will review SSPs, SAPs, SARs, POA&Ms, and other docs, conduct assessments, and support authorization decisions and continuous monitoring activities.

Qualifications

• Active TS or higher with ability to obtain DOE Q/SCI.
• Bachelor's degree in a Cybersecurity/IT-related field or equivalent.
• 12+ years of cybersecurity or information assurance experience; 16+ years with HS diploma.
• Experience supporting RMF and evaluating security controls.
• Experience developing/reviewing SSPs/SAPs/SARs/POA&Ms.
• Knowledge of federal cybersecurity policies and compliance requirements.
• Strong analytical and technical writing skills; effective communication.
• Ability to work independently and with government stakeholders.

Responsibilities

• Conduct independent security control assessments per NIST SP 800-53 and gov't policies.
• Evaluate design, implementation, and operation of security controls.
• Support RMF activities throughout the system authorization lifecycle.
• Review SSPs, SAPs, SARs, and POA&Ms; assess documentation quality.
• Develop and execute Security Assessment Plans; document findings and risks.
• Identify deficiencies, document findings, and track remediation.
• Coordinate with ISSOs/ISSMs, system owners, and government AOs.
• Provide risk assessments and recommendations to leadership and stakeholders.

Skills

RMF experience

NIST 800-53

Security controls assessment

Technical writing

Communication

Education

Bachelor's degree in Cybersecurity/IT/CS/IS

High School Diploma or equivalent

Tools

ACAS

Nessus

SCAP

Job description

Peraton is seeking a qualified Security Control Assessor (SCA) to evaluate security controls in information systems and ensure compliance with federal cybersecurity policies. The role requires RMF experience, NIST 800-53 knowledge, and collaboration with government stakeholders in a classified environment.

The SCA will review SSPs, SAPs, SARs, POA&Ms, and other docs, conduct assessments, and support authorization decisions and continuous monitoring activities.