Security Assessor
Core
Conduct comprehensive security assessments of federal information systems, networks, and applications to evaluate compliance with NIST RMF and FedRAMP standards, identifying vulnerabilities and recommending remediation.
Role type
Senior Security Assessor (Federal Cybersecurity)
Builds
Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and authorization packages for federal systems.
Domain
Federal Government / Cybersecurity Compliance
Required skills
NIST RMF application, FedRAMP compliance, vulnerability assessment, cloud security evaluation, secure SDLC analysis, security documentation, risk identification, stakeholder collaboration
Preferred skills
CISSP/CISM/CISA/CASP+ certification, CISA AES Assessment Lead certification, cloud security assessment experience, automated security tool usage
Technologies
NIST SP 800-53, NIST SP 800-37, FISMA, FedRAMP, IaaS/PaaS/SaaS environments, vulnerability scanning tools
Responsibilities
Conduct assessments of management, operational, and technical security controls; Evaluate cloud-based environments (IaaS, PaaS, SaaS); Perform vulnerability assessments and configuration reviews; Support Authorization to Operate (ATO) processes; Prepare comprehensive security documentation (SAPs, SARs, POA&Ms); Collaborate with ISSOs and system owners; Monitor emerging cybersecurity threats and regulatory updates.
Seniority
Senior, hands-on IC
