Principal Security Control Assessor - TS/SCI

Parsons Corporation•Aberdeen, MD

8d•$125,100 - $225,200•Onsite

About The Position

Our team is rapidly expanding to support customers within the Aberdeen Proving Ground and Edgewood, Maryland markets, with efforts spanning a 5-year period of performance and a $500+ million contract ceiling. Join a diverse group of approximately 500 professionals supporting Electronic Warfare, Cyber Warfare, Intelligence, Sensors, Integration, and more! across operations and technical disciplines. We are delivering expertise in software and hardware engineering, cybersecurity, system integration, fielding, sustainment, and technical training. Leveraging emerging technologies such as Artificial Intelligence and Cloud Computing, our support is at the forefront of advanced technology development for the warfighter. Be part of a collaborative, innovative environment where your work directly impacts national defense, Army modernization, and support to the warfighter. We are seeking experienced Security Control Assessors / Risk Management Framework (RMF) Analysts to support cybersecurity authorization and compliance activities for Army PM Intelligence Systems and Analytics (IS&A) in Aberdeen, Maryland. A successful candidate will be responsible for developing, maintaining, and updating security authorization packages in eMASS and supporting systems through the Authorization to Operate (ATO) lifecycle. Successful candidates will have strong practical knowledge of RMF processes, cybersecurity controls, assessment documentation, and eMASS. This position requires the ability to work onsite in a Government SCIF and support classified programs.

Requirements

Active Top Secret/Sensitive Compartmented Information TS/SCI clearance.
Bachelor's Degree in Computer Science or a related technical field, or equivalent experience and a minimum of 10 years years of related professional experience.
Ability to work onsite in a Government SCIF in Aberdeen, Maryland.
Demonstrated experience supporting the Risk Management Framework.
Strong experience developing, maintaining, and managing security authorization packages in eMASS.
Experience assessing or documenting NIST 800-53 security controls.
Experience supporting IATTs, ATOs, renewals, continuous monitoring, and remediation activities.
Ability to obtain, organize, evaluate, and incorporate technical information from multiple vendors and stakeholders.
Familiarity with DSO pipeline development and security practices
Strong analytical, documentation, communication, and organizational skills.
Ability to work independently and collaboratively in a mission-focused environment.

Nice To Haves

Experience supporting DoD or Intelligence Community cybersecurity programs.
Experience as a Security Control Assessor, ISSO, ISSM, or RMF practitioner.
Familiarity with DoD RMF guidance, cybersecurity policies, and authorization processes.
Experience leading RMF teams or managing multiple authorization packages.
Relevant certifications, such as: Certified Information Systems Security Professional CISSP, Certified Authorization Professional CAP, Security+, Certified Ethical Hacker CEH, Certified Information Security Manager CISM, Other DoD 8570/8140-compliant certifications

Responsibilities

Execute RMF activities in accordance with applicable DoD, federal, and customer-specific policies and procedures.
Serve as a Security Control Assessor or RMF analyst supporting system authorization and continuous monitoring.
Develop, update, and maintain IATT and ATO packages in eMASS.
Collect and analyze cybersecurity and system security information from government organizations, system owners, vendors, and technical teams.
Review security control implementation statements, assessment evidence, plans of action and milestones, risk assessments, and related authorization documentation.
Validate that security controls are properly documented, implemented, assessed, and tracked.
Identify security deficiencies, compliance gaps, and residual risks, and assist with developing appropriate remediation plans.
Support preparation of authorization packages for IATTs, IATT renewals, initial ATOs, ATO renewals, and ongoing ATO maintenance.
Coordinate with Information System Owners, ISSOs, ISSMs, system administrators, engineers, vendors, and government stakeholders.
Track package status, assessment findings, documentation requirements, and authorization milestones.
Provide clear written and verbal communication regarding security posture, risk, compliance status, and recommended actions.
Support continuous monitoring activities, including security control updates, vulnerability information, configuration changes, and system changes.
Participate in technical reviews, security meetings, customer briefings, and authorization decision activities.
Maintain strict compliance with security requirements for work conducted in a classified environment.