Security Assessor

SecuriGence • , VA

18h • $103,400 - $115,000 • Remote

About The Position

The Security Assessor will help ensure the security and compliance of information systems supporting the HHS ACL EITS program. The role assesses security controls, conducts security audits, and develops secure architectures aligned with federal requirements and guidance, including FISMA, NIST 800-53, and FedRAMP. The Security Assessor/Security Architect works with the Information System Security Officer (ISSO), Cloud Infrastructure Architect, and other program teams to support a secure and resilient environment.

The position also contributes to risk management, system authorization, incident response, forensic investigations, and security awareness training. It maintains security documentation and supports the ongoing protection of program information assets.

Requirements

• Bachelor's degree in Cybersecurity or Information Technology, or additional experience in lieu of a degree.
• At least 5 years of experience in security architecture, security assessment, or a related cybersecurity role within a federal or government environment.
• Ability to pass a Public Trust Background Investigation.
• Extensive experience with NIST RMF, FISMA, FedRAMP, and other federal security frameworks.
• Familiarity with cloud security architectures, particularly Microsoft Azure and/or AWS environments.
• Strong understanding of vulnerability management, penetration testing, and forensic investigation tools.
• Experience with SIEM tools, security monitoring, and incident response frameworks.

Nice To Haves

• Certified Information Systems Auditor (CISA) or Certified Ethical Hacker (CEH) certification preferred.
• Certified Information Security Manager (CISM) or Certified Cloud Security Professional (CCSP) certification is a plus.
• Certified Information Systems Security Professional (CISSP), or equivalent experience and knowledge commensurate with certification requirements.

Responsibilities

• Assess HHS ACL EITS system security controls for compliance with FISMA, NIST 800-53, FedRAMP, and other federal regulations.
• Prepare and present security assessment reports to senior management and government stakeholders.
• Develop and maintain secure architecture designs that comply with federal security standards and protect confidentiality, integrity, and availability.
• Collaborate with the Cloud Infrastructure Architect and Application Developers to incorporate security controls into system design and implementation.
• Apply security-by-design principles and ensure software, systems, and infrastructure meet security requirements.
• Conduct risk assessments and prioritize risks associated with information systems.
• Develop and implement risk mitigation strategies aligned with government standards.
• Maintain accurate and current security documentation, including System Security Plans (SSPs) and Risk Management Framework (RMF) artifacts.
• Perform vulnerability assessments and penetration testing, and identify and remediate security weaknesses.
• Assist with preparing and executing Authorization and Accreditation (A&A) packages in compliance with NIST RMF.
• Work with the Authorizing Official (AO) to support timely system authorization and maintain accurate authorization status.
• Assist with incident response by investigating and reporting security breaches, unauthorized access, and other security incidents.
• Lead forensic investigations to determine incident root causes and recommend remediation.
• Prepare post-incident reports documenting findings and actions to prevent recurrence.
• Develop and deliver security awareness training for staff and stakeholders.
• Promote a security-first mindset across the program.
• Perform other duties as assigned.

Benefits

• The company offers a broad range of benefits, but specific benefits are not listed.
• Well-being programs.
• Professional development opportunities, including on-the-job learning and formal development programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior