Senior Security Controls Assessor — On-Site in VA

SAIC; Springfield (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

SAIC is seeking a Senior Security Control Assessor to support RMF-based cybersecurity assessments for mission-critical IT systems at the MAJESTIC JPO Team. This on-site role in Springfield, VA requires collaboration with ISSMs, ISOs, and system admins to review security artifacts and drive authorization decisions.

The ideal candidate will have 5–9 years of enterprise IT security experience, relevant certifications, and experience producing SARs and supporting A&A efforts in a DoD/government

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT or related field.
• 5–9 years of professional IT security experience.
• Proficiency with RMF, NIST 800-53 and related federal standards.
• Experience producing SARs and supporting A&A processes.
• Must be US citizen with TS/SCI clearance preferred.

Responsibilities

• Conduct independent assessments to validate RMF/NIST 800-53 compliance.
• Review ABDs, RARs, SSPs, STIGs, and vulnerability results for A&A.
• Lead control implementation reviews and system-level security assessments.
• Provide formal recommendations on authorization status to AOs.
• Analyze vulnerability scans and support remediation planning.
• Perform continuous monitoring and document security posture changes.
• Interface with engineers and ISSOs to resolve findings and risks.

Skills

RMF / NIST 800-53

Security assessment & A&A

Vulnerability mgmt (ACAS/Nessus/Qualys

Documentation & SARs

ISSO/ISSM collaboration

Education

Bachelor’s Degree in Cybersecurity / CS / IT

Bachelor’s Degree

Tools

ACAS

Nessus

Qualys

DISA STIGs

Kali Linux

METASPLOIT

Job description

SAIC is seeking a Senior Security Control Assessor to support RMF-based cybersecurity assessments for mission-critical IT systems at the MAJESTIC JPO Team. This on-site role in Springfield, VA requires collaboration with ISSMs, ISOs, and system admins to review security artifacts and drive authorization decisions.

The ideal candidate will have 5–9 years of enterprise IT security experience, relevant certifications, and experience producing SARs and supporting A&A efforts in a DoD/government