Sr. Security Control Assessor - TS/SCI

VulnU; Aberdeen, Northern (MD, KY); Hybrid; USD 112,000 - 196,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

Employee Stock Ownership Plan (ESOP)

Paid time off

Flexible work schedules

Holidays

Job summary

Parsons is seeking an experienced RMF Analyst to support security authorization and continuous monitoring for Army IS&A programs in Aberdeen, MD. You will prepare and maintain ATO packages in eMASS and coordinate with government and contractor teams in a classified environment.

The role requires TS/SCI clearance, strong RMF, and the ability to work onsite within a government SCIF. You will lead package development, assessments, and remediation activities across multiple stakeholders.

Qualifications

• Active TS/SCI clearance required.
• Bachelor's degree or equivalent experience in a technical field.
• Experience developing and maintaining security authorization packages.

Responsibilities

• Execute RMF activities per DoD and customer policies.
• Serve as Security Control Assessor supporting system authorization and OJT.
• Develop and maintain IATT/ATO packages in eMASS.
• Collect, analyze, and document cybersecurity information from multiple stakeholders.
• Review control implementations, evidence, plans of action, and milestones.
• Identify deficiencies and help create remediation plans.
• Prepare authorization packages for IATTs, ATOs, renewals, and ongoing maintenance.
• Coordinate with ISSOs/ISSMs, system owners, engineers, and vendors.
• Communicate security posture and recommended actions clearly in writing and verbally.
• Support continuous monitoring and system changes in a classified environment.

Skills

RMF experience

Analytical skills

Documentation

Communication

Organizational skills

Education

Bachelor's Degree in Computer Science or related technical field

Tools

eMASS

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible. Job Description:Our team is rapidly expanding to support customers within the Aberdeen Proving Ground and Edgewood, Maryland markets, with efforts spanning a 5-year period of performance and a $500 million contract ceiling. Join a diverse group of approximately 500 professionals supporting Electronic Warfare, Cyber Warfare, Intelligence, Sensors, Integration, and more! across operations and technical disciplines. We are delivering expertise in software and hardware engineering, cybersecurity, system integration, fielding, sustainment, and technical training. Leveraging emerging technologies such as Artificial Intelligence and Cloud Computing, our support is at the forefront of advanced technology development for the warfighter. Be part of a collaborative, innovative environment where your work directly impacts national defense, Army modernization, and support to the warfighter.We are seeking experienced Security Control Assessors / Risk Management Framework (RMF) Analysts to support cybersecurity authorization and compliance activities for Army PM Intelligence Systems and Analytics (IS&A) in Aberdeen, Maryland.A successful candidate will be responsible for developing, maintaining, and updating security authorization packages in eMASS and supporting systems through the Authorization to Operate (ATO) lifecycle. Successful candidates will have strong practical knowledge of RMF processes, cybersecurity controls, assessment documentation, and eMASS. This position requires the ability to work onsite in a Government SCIF and support classified programs. What You'll Be Doing:Execute RMF activities in accordance with applicable DoD, federal, and customer-specific policies and procedures.Serve as a Security Control Assessor or RMF analyst supporting system authorization and continuous monitoring.Develop, update, and maintain IATT and ATO packages in eMASS.Collect and analyze cybersecurity and system security information from government organizations, system owners, vendors, and technical teams.Review security control implementation statements, assessment evidence, plans of action and milestones, risk assessments, and related authorization documentation.Validate that security controls are properly documented, implemented, assessed, and tracked.Identify security deficiencies, compliance gaps, and residual risks, and assist with developing appropriate remediation plans.Support preparation of authorization packages for IATTs, IATT renewals, initial ATOs, ATO renewals, and ongoing ATO maintenance.Coordinate with Information System Owners, ISSOs, ISSMs, system administrators, engineers, vendors, and government stakeholders.Track package status, assessment findings, documentation requirements, and authorization milestones.Provide clear written and verbal communication regarding security posture, risk, compliance status, and recommended actions.Support continuous monitoring activities, including security control updates, vulnerability information, configuration changes, and system changes.Participate in technical reviews, security meetings, customer briefings, and authorization decision activities.Maintain strict compliance with security requirements for work conducted in a classified environment. Required Qualifications:Active Top Secret/Sensitive Compartmented Information TS/SCI clearance.Bachelor's Degree in Computer Science or a related technical field, or equivalent experience and a minimum of 8 years years of related professional experience.Ability to work onsite in a Government SCIF in Aberdeen, Maryland.Demonstrated experience supporting the Risk Management Framework.Strong experience developing, maintaining, and managing security authorization packages in eMASS.Experience assessing or documenting NIST 800-53 security controls.Experience supporting IATTs, ATOs, renewals, continuous monitoring, and remediation activities.Ability to obtain, organize, evaluate, and incorporate technical information from multiple vendors and stakeholders.Familiarity with DSO pipeline development and security practicesStrong analytical, documentation, communication, and organizational skills.Ability to work independently and collaboratively in a mission-focused environment. Preferred QualificationsExperience supporting DoD or Intelligence Community cybersecurity programs.Experience as a Security Control Assessor, ISSO, ISSM, or RMF practitioner.Familiarity with DoD RMF guidance, cybersecurity policies, and authorization processes.Experience leading RMF teams or managing multiple authorization packages.Relevant certifications, such as:Certified Information Systems Security Professional CISSPCertified Authorization Professional CAPSecurityCertified Ethical Hacker CEHCertified Information Security Manager CISMOther DoD 8570/8140-compliant certificationsSecurity Clearance Requirement:An active Top Secret SCI security clearance is required for this position.This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.Salary Range: $112,200.00 - $196,400.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, Employee Stock Ownership Plan (ESOP), 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.