Hybrid Security Control Assessor

at Leidos

• Job title: Security Control Assessor
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: $67,600 - $122,200 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud, Cyber Security, Unix
• Location requirements: Hybrid, Odenton, United States

About the role

• Traveling Security Control Assessor at Leidos performing RMF assessments, vulnerability testing, and eMASS reporting for DoD systems

Responsibilities

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing
• Adhere to policies and processes for each assessment type
• Support assessment development and execution to ensure security expertise is properly applied
• Coordinate logistics, test plans, and scope with the SCA Team Lead
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS
• Analyze security gaps and provide mitigation recommendations
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines
• Provide risk analysis and assessment results for authorization recommendations
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R
• Mentor and guide personnel if senior staff, providing technical expertise and professional development support
• Travel domestically or internationally up to ~85% and work from home when not on assignment; initial 4-8 weeks of virtual training

Requirements

• Active DoD Top Secret clearance with SCI eligibility required
• Current DoD 8570 IAM II or IAT II certification
• Ability and willingness to travel for assessments as required, up to 85% of the time
• Bachelor's degree (IT-related field preferred) and five (5) years cybersecurity or network security experience for Level II (including three (3) years in a Certification and Accreditation/A&A role)
• Bachelor's degree (IT-related field preferred) and eight (8) years cybersecurity or network security experience for Level III (including five (5) years in a Certification and Accreditation/A&A role)
• Additional relevant experience may be considered in lieu of degree
• Demonstrated experience with STIGs, SRGs, POA&Ms
• Experience with tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
• Strong understanding of the RMF process, NIST SP 800-37, NIST SP 800-53, CNSSI 1253
• Experience across Network, Mobility, Windows, UNIX, Cloud Environments and Cloud Native Tools/Services, HBSS/Endpoint Security Solutions, Databases, Applications
• Strong written and verbal communication skills
• Must be local to Alexandria, VA, Fort Meade, MD, or Chambersburg, PA for training and occasional customer meetings

Benefits

• competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave
• Retirement
• Per diem provided to cover expenses during travel
• Ability to work from home when not on assignment
• Training (first 4-8 weeks in virtual classroom)