Sr. Security Control Assessor - TS/SCI

Parsons; Aberdeen (MD); On-site; USD 112,000 - 196,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Paid time off

ESOP

401(k)

Life insurance

Flexible schedules

Holidays

Job summary

Parsons in Aberdeen, Maryland seeks a seasoned RMF/Cyber Security Analyst to support DoD and federal programs. You will develop and maintain RMF artifacts, coordinate with ISSOs/ISSMs, system owners, and vendors, and lead authorization activities in a classified environment.

The role requires TS/SCI clearance, a CS degree or equivalent, 8+ years of experience, and hands-on work with eMASS, ATO/IATT processes, and NIST 800-53 control assessments.

Qualifications

• Active TS/SCI clearance required.
• Bachelor's degree in Computer Science or related field, or equivalent experience.
• 8+ years of related professional experience.
• Ability to work onsite in a Government SCIF in Aberdeen, MD.
• Experience supporting Risk Management Framework.
• Strong experience developing, maintaining, and managing security authorization packages in eMASS.
• Experience assessing or documenting NIST 800-53 security controls.
• Experience supporting IATTs, ATOs, renewals, continuous monitoring, and remediation activities.
• Ability to obtain, organize, evaluate, and incorporate technical information from multiple vendors and stakeholders.
• Familiarity with DoD RMF guidance and cybersecurity policies.

Responsibilities

• Execute RMF activities per DoD and federal policies.
• Serve as a Security Control Assessor or RMF analyst supporting system authorization and continuous monitoring.
• Develop, update, and maintain IATT and ATO packages in eMASS.
• Collect and analyze cybersecurity information from government organizations, system owners, vendors, and technical teams.
• Review security control implementation statements, assessment evidence, plans of action and milestones, risk assessments, and related authorization documentation.
• Validate that security controls are properly documented, implemented, assessed, and tracked.
• Identify security deficiencies, compliance gaps, and residual risks, and assist with remediation plans.
• Coordinate with ISOs, ISSMs, system admins, engineers, vendors, and government stakeholders.
• Provide clear written and verbal communication regarding security posture, risk, and compliance status.

Skills

RMF experience

NIST 800-53

eMASS

DoD cybersecurity

Documentation

Communication

Education

Bachelor's degree in Computer Science

Tools

eMASS

Job description

Job Description:

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

What You'll Be Doing:

• Execute RMF activities in accordance with applicable DoD, federal, and customer-specific policies and procedures.
• Serve as a Security Control Assessor or RMF analyst supporting system authorization and continuous monitoring.
• Develop, update, and maintain IATT and ATO packages in eMASS.
• Collect and analyze cybersecurity and system security information from government organizations, system owners, vendors, and technical teams.
• Review security control implementation statements, assessment evidence, plans of action and milestones, risk assessments, and related authorization documentation.
• Validate that security controls are properly documented, implemented, assessed, and tracked.
• Identify security deficiencies, compliance gaps, and residual risks, and assist with developing appropriate remediation plans.
• Support preparation of authorization packages for IATTs, IATT renewals, initial ATOs, ATO renewals, and ongoing ATO maintenance.
• Coordinate with Information System Owners, ISSOs, ISSMs, system administrators, engineers, vendors, and government stakeholders.
• Track package status, assessment findings, documentation requirements, and authorization milestones.
• Provide clear written and verbal communication regarding security posture, risk, compliance status, and recommended actions.
• Support continuous monitoring activities, including security control updates, vulnerability information, configuration changes, and system changes.
• Participate in technical reviews, security meetings, customer briefings, and authorization decision activities.
• Maintain strict compliance with security requirements for work conducted in a classified environment.

Required Qualifications:

• Active Top Secret/Sensitive Compartmented Information TS/SCI clearance.
• Bachelor's Degree in Computer Science or a related technical field, or equivalent experience and a minimum of 8 years years of related professional experience.
• Ability to work onsite in a Government SCIF in Aberdeen, Maryland.
• Demonstrated experience supporting the Risk Management Framework.
• Strong experience developing, maintaining, and managing security authorization packages in eMASS.
• Experience assessing or documenting NIST 800-53 security controls.
• Experience supporting IATTs, ATOs, renewals, continuous monitoring, and remediation activities.
• Ability to obtain, organize, evaluate, and incorporate technical information from multiple vendors and stakeholders.
• Familiarity with DSO pipeline development and security practices
• Strong analytical, documentation, communication, and organizational skills.
• Ability to work independently and collaboratively in a mission-focused environment.

Preferred Qualifications

• Experience supporting DoD or Intelligence Community cybersecurity programs.
• Experience as a Security Control Assessor, ISSO, ISSM, or RMF practitioner.
• Familiarity with DoD RMF guidance, cybersecurity policies, and authorization processes.
• Experience leading RMF teams or managing multiple authorization packages.
• Relevant certifications, such as:
• Certified Information Systems Security Professional CISSP
• Certified Authorization Professional CAP
• Security+ Certified Ethical Hacker CEH
• Certified Information Security Manager CISM
• Other DoD 8570/8140-compliant certifications

Security Clearance Requirement:

An active Top Secret SCI security clearance is required for this position.

This position is part of our Federal Solutions team.

Salary Range: $112,200.00 - $196,400.00

• medical
• dental
• vision
• paid time off
• Employee Stock Ownership Plan (ESOP)
• 401(k)
• life insurance
• flexible work schedules
• holidays to fit your busy lifestyle!

Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.

About Us

Parsons is a digitally enabled solutions provider focused on the defense, security, and infrastructure markets. With nearly 75 years of experience, Parsons is uniquely qualified to deliver cyber/converged security, technology-based intellectual property, and other innovative services to federal, regional, and local government agencies, as well as to private industrial customers worldwide.

Parsons is an equal opportunity, drug-free employer committed to diversity in the workplace. Minority/Female/Disabled/Protected Veteran/LGBTQ+.