Senior Security Control Assessor (SCA) with Security Clearance

Experience: Minimum 7 years in RMF security control assessment; source also specifies 7–10 years of related experience
Education: Bachelor's degree in IT, Cybersecurity, Information Systems, or Computer Science, OR minimum 10 years of IT/cybersecurity experience Requirement Overview
Seeking Senior Security Control Assessors to lead complex cybersecurity assessment and authorization activities involving classified DHS Intelligence Enterprise systems, Cross Domain Solutions (CDS), Special Access Program (SAP) systems, C-LAN extension sites, and cloud environments.
The role requires advanced RMF expertise, independent assessment leadership, risk evaluation, security authorization knowledge, and the ability to mentor junior assessment personnel.

Key Responsibilities
Lead complex security control assessments involving classified, sensitive, and mission-critical information systems. Evaluate security controls employed directly by systems and inherited from enterprise common control providers. Perform security assessments according to established Security Assessment Plans and applicable federal and IC requirements. Assess Cross Domain Solutions, Special Access Program systems, cloud-hosted environments, and C-LAN extension sites. Analyze implementation and effectiveness of security controls against NIST RMF, ICD 503, and CNSSI 1253.

Conduct vulnerability and configuration security assessments using enterprise security assessment tools. Identify control deficiencies and provide technical recommendations for correcting vulnerabilities and compliance gaps. Evaluate security risks and provide assessment findings supporting authorization decisions. Develop and improve assessment methodologies, SOPs, and authorization processes. Support improvements toward ongoing authorization and security assessment reciprocity. Provide technical oversight and mentoring to junior security assessors.

Mandatory Skills
Advanced NIST Risk Management Framework
ICD 503 and CNSSI 1253
Security Control Assessments and A&A
Cross Domain Solutions and/or SAP system assessment requirements
Cloud security authorization principles
SSP, SAP, SAR, and POA&M evaluation
Security assessment methodologies and risk analysis
Hands-on experience with at least two tools such as Nessus/ACAS, SCAP, WebInspect, SonarQube, or STIG Viewer
Assessment procedure development and technical leadership
Experience leading complex assessments independently
Certifications: No specific mandatory or preferred certification is listed in the supplied Senior SCA document.