Security Assessment Lead
Core
Lead security assessments, vulnerability analyses, and risk management for FAA National Airspace System and operational technology environments.
Role type
Senior Security Assessment Lead (IC with management responsibilities)
Builds
System Security Assessment Reports (SARs), Plans of Action and Milestones (POAMs), and assessment test plans for federal air traffic systems.
Domain
Federal Aviation Administration (FAA) / National Airspace System / Operational Technology / Industrial Control Systems
Required skills
NIST SP 800-53/53A/800-37 (RMF) expertise, vulnerability assessment tool proficiency (Nessus, WebInspect, nMap), SAR/POAM development, OT/ICS environment experience, risk guidance translation, regression assessment leadership, stakeholder coordination, safety protocol adherence
Preferred skills
Public Trust clearance, Secret clearance, CISSP/GCED/CISA/CASP+/CISA, FAA Order 1370.82/1370.121 familiarity, NAS/FAA ATO ISCM Plan experience, cloud services in federal environments, international/telecom infrastructure assessment
Technologies
Nessus, WebInspect, AppDetective Pro, nMap, Tcpdump, Excel
Responsibilities
Plan and coordinate security assessments at FAA facilities nationwide; personally lead complex assessment events; develop vulnerability scanning strategies and evaluate tool configurations; translate findings into risk guidance and actionable POAMs; lead regression assessments to verify patch effectiveness; coordinate with NAS system owners and facility staff to resolve access challenges; ensure assessment activities follow safety protocols in operational environments.
Seniority
Senior, hands-on IC with team leadership
