Senior Security Control Assessor: TS/SCI Poly (On-Site)

SAIC; Springfield (VA); On-site; USD 120,001 - 160,000; Full time

Job summary

SAIC is seeking a Senior Security Control Assessor (SCA) to support cybersecurity assessments for mission-critical IT systems in Springfield, VA. The role requires working with ISSMs, ISOs, and admins to ensure RMF, NIST 800-53, and A&A compliance, with on-site work in Springfield, VA.

The candidate will perform independent control assessments, review artifacts, lead control implementation reviews, analyze vulnerability data, and prepare SARs and risk summaries for senior stakeholders.

Qualifications

• Proven ability to conduct independent assessments of security controls.
• Experience aligning with RMF, NIST SP 800-53 and DoD 8510.01 requirements.
• Ability to produce Security Assessment Reports and clear recommendations.

Responsibilities

• Conduct objective assessments to validate security control compliance.
• Review ABDs, RARs, SSPs, STIGs, and vulnerability results for A&A.
• Lead control implementation reviews and system-level security assessments.
• Provide formal authorization recommendations to AO based on findings.
• Analyze vulnerability scan data and communicate risk posture to stakeholders.
• Perform continuous monitoring to identify changes affecting security posture.
• Validate DISA STIGs/CIS Benchmarks across systems and apps.
• Collaborate with ISSOs, engineers, and stakeholders to remediate risks.
• Improve processes, tools, and documentation for control assessments.
• Compile SARs and risk summaries for senior decision-makers.
• Maintain up-to-date knowledge of threats, frameworks, and best practices.

Skills

Security control assessment

RMF & NIST SP 800-53

Vulnerability assessment

Documentation & SARs

Education

Bachelor's Degree in Cybersecurity/CS/IT

Tools

ACAS/Nessus/Qualys

Windows Server

RHEL (Linux)

Job description

SAIC is seeking a Senior Security Control Assessor (SCA) to support cybersecurity assessments for mission-critical IT systems in Springfield, VA. The role requires working with ISSMs, ISOs, and admins to ensure RMF, NIST 800-53, and A&A compliance, with on-site work in Springfield, VA.

The candidate will perform independent control assessments, review artifacts, lead control implementation reviews, analyze vulnerability data, and prepare SARs and risk summaries for senior stakeholders.