Security Assessor
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Responsibilities:
- Conduct comprehensive cybersecurity assessments of federal information systems
- Perform in-depth assessments and testing of management, operational, and technical security controls across systems, networks, and software applications
- Assess cloud-based IaaS, PaaS, and SaaS deployments
- Apply IT, cybersecurity, and information-processing systems knowledge to evaluate security performance and integrity
- Conduct vulnerability and configuration assessments using automated tools and manual techniques
- Evaluate secure software development lifecycle (SDLC) and DevSecOps practices
- Apply modern cybersecurity practices, including cloud security, Zero Trust, AI, and machine learning
- Identify security weaknesses, document findings, assess risk severity, and recommend remediation actions
- Support Authorization to Operate (ATO), annual assessment, continuous monitoring, and reauthorization activities
- Collaborate with engineers, ISSOs, administrators, and government stakeholders
- Review system security artifacts and prepare Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
- Stay current on cybersecurity threats, federal guidance, and evolving compliance requirements
Requirements:
- Bachelor’s degree from an accredited college or university
- Minimum of seven years of experience supporting cybersecurity, information assurance, or Security Assessment and Authorization (A&A) activities
- Experience applying the NIST Risk Management Framework (RMF)
- Knowledge of NIST SP 800-53, NIST SP 800-37, FISMA, FedRAMP, and other federal cybersecurity requirements
- Experience reviewing security documentation and evaluating security controls
- Strong analytical, communication, stakeholder engagement, and technical writing skills
- Must be able to obtain and maintain a Public Trust determination, including successfully completing the required federal background investigation
- Must be a US Citizen
- Preferred: Active cybersecurity certification such as CISSP, CISM, CISA, CASP+, or equivalent credential
- Preferred: Experience supporting federal cybersecurity contracts
- Preferred: Experience with vulnerability scanning tools, cloud security, continuous monitoring, and assessment automation
- CISA AES Assessment Lead (AL) or Technical Lead (TL) certification desired, but not required
Benefits:
- Competitive compensation
- Professional development opportunities
- Certification support
- Remote work options
- Collaborative environment
- Mentorship from experienced cybersecurity professionals
- Veterans are strongly encouraged to apply
Similar Jobs
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.
Associate, Cybersecurity – Data Privacy Litigation
Associate attorney defending privacy, cybersecurity, and complex commercial litigation for Constangy, Brooks, Smith & Prophete, LLP. Conducting research, drafting litigation documents, and supporting cases through trial preparation.
Associate Security Researcher
Associate Security Researcher supporting Cobalt’s penetration-testing research through systems administration, threat simulation, vulnerability triage, and technical report quality control.
Cyber Security Engineer
Cyber Security Engineer leading incident response, threat hunting, and forensics for NVIDIA’s corporate, cloud, and product environments. Building automated defenses against advanced threats.
Senior Security Research Architect, Confidential Computing
Senior Security Research Architect designing Trusted Execution Environment architectures for NVIDIA NICs and DPUs. Driving confidential-computing security across hardware, software, research, and product teams.
IT and Security Manager
IT and Security Manager securing Microsoft 365, Azure, vendors, and cybersecurity operations for Furnished Quarters’ furnished apartment business. Managing infrastructure, incident response, access, compliance, and technology partnerships.
Senior Security Engineer
Senior Security Engineer protecting Cisco’s network-device portfolio through threat modeling, code review, and reproducible security testing. Improving embedded and IoT security across hardware, firmware, and device lifecycles.
Regional Sales Manager – Security
Regional Sales Manager growing security-channel sales for Nice North America, a smart home and building automation company. Managing customers, training partners, exceeding quotas, and providing competitive intelligence across the assigned territory.
Senior Director, Product Security and Privacy Counsel
Product counsel guiding security, privacy, open-source licensing, and regulatory risk for Neo4j’s graph intelligence platform. Partnering with product, engineering, security, and go-to-market teams.
Senior Security Engineer, Product
Senior Security Engineer owning product and protocol security for Jito’s Solana market infrastructure. Building security tooling, monitoring, audits, and protections for crypto products.
Principal Security Engineer
Principal Security Engineer assessing CSP architectures and authorization packages for FedRAMP compliance. Supporting Valiant Solutions’ federal cybersecurity and IT services for government customers.
Cybersecurity Engineer, Clearance Required
Cybersecurity Engineer securing Army cloud infrastructure and maintaining RMF authorization artifacts for LMI, a federal digital solutions provider. Integrating DoD controls, vulnerability management, and DevSecOps workflows.
Técnico Seguridad Perimetral
Administrador Oracle gestionando bases de datos corporativas para Logicalis Spain, empresa de centros de datos y soluciones tecnológicas. Instalación, migración, mantenimiento y soporte de entornos Oracle empresariales.
Técnico/a de Comunicaciones – Redes, Seguridad Perimetral, SD-WAN
Técnico de comunicaciones gestionando redes corporativas, seguridad perimetral y SD-WAN para The Whiteam Consulting. Integrando infraestructuras on-premise y cloud en proyectos tecnológicos.