Security Control Assessor

TL;DR

Security Control Assessor (NIST RMF): Provide security authorization support by independently assessing Risk Management Framework Steps 0 to 7 and evaluating the effectiveness of implemented security controls. Focus on building NIST-aligned assessment procedures, analyzing vulnerabilities and STIG implementations, and producing Security Assessment Reports (SARs) with remediation verification and continuous monitoring support.

Location: Alexandria, VA - Secret clearance required

Salary: $60,000 - $180,000 USD

Company

hirify.global provides IT services and solutions to federal and commercial customers.

What you will do

• Prepare tailored documentation to support client security authorization.
• Independently assess Risk Management Framework (RMF) Steps 0 to 7.
• Plan and execute security control assessments across organizational information systems.
• Develop and maintain assessment procedures and methodologies aligned with NIST and other relevant frameworks.
• Analyze security control effectiveness, identify vulnerabilities/weaknesses, and document findings and recommendations in Security Assessment Reports (SARs).
• Verify remediation actions, perform follow-up assessments, and advise on System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).

Requirements

• Active Secret security clearance.
• Bachelor’s degree or equivalent years of relevant experience.
• 5+ years of relevant experience.
• Certification in one or more: CCNA Security, CySA+, GICSP, GSEC, Security+, CE, CND, or SSCP.
• Intimate understanding of NIST RMF implementation guidance.
• Hands-on experience with eMASS (or similar information assurance tools) and with vulnerability scan analysis and STIG implementations.

Culture & Benefits

• Full-time employee compensation with a stated pay range for the position.
• Benefits package available through hirify.global.
• Work supporting government contracts for a client located in Alexandria, VA.
• Emphasis on modern, sustainable change and improved performance for client organizations.