Security Control Assessor

Booz Allen Hamilton • Herndon, VA

1d

About The Position

The Security Control Assessor evaluates security controls, conducts system assessments, and supports compliance across complex technical environments for a U.S. government client. The role reviews security documentation, validates implemented controls, identifies deficiencies and missing details, assesses residual risk, and provides remediation recommendations. The assessor guides stakeholders through the Risk Management Framework (RMF), performs comprehensive assessments, and produces authoritative reports that support authorization decisions and strengthen security posture. The position also supports cloud security, cybersecurity hygiene, and national security missions.

Requirements

• At least 5 years of experience using and applying NIST Special Publication 800-53.
• Experience conducting security control assessments, including documentation review, interviews, and technical testing.
• Knowledge of technology security controls and the network accreditation process.
• TS/SCI clearance with a polygraph.
• High school diploma or GED.

Nice To Haves

• Experience with cloud networking providers, including Amazon Web Services (AWS), Oracle, Microsoft, or Google.
• Experience with assessment or authorization tools such as Xacta.
• Experience with scanning tools, including Nessus, Rapid7, or Nipper.
• Experience monitoring and assessing risk on Plans of Action and Milestones (POA&M) items.
• Experience communicating security complexities to varied audiences, including senior management.

Responsibilities

• Conduct security control assessments across complex systems, including documentation reviews, interviews, and technical testing.
• Review and validate the effectiveness of implemented security controls, identify deficiencies, and assess residual risk.
• Guide stakeholders through the Risk Management Framework (RMF) and support authorization decisions with assessment reports and recommendations.
• Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Perform risk and vulnerability assessments in network, system, and application areas.
• Use big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Recommend remediation strategies and help ensure systems meet authorization requirements.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED