Security Control Assessor

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Herndon, VA
Salary
$99,000–$225,000 / yr
Employment
Full-time
Posted
14 days ago
Freshness
Confirmed live today
Closes
Jan 11, 2027

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $171k
This role $162k
$84k $240k
below market most similar roles pay here above market

This role pays less than 52% of similar roles. Most pay $134,500–$206,925 — the blue band above. At the midpoint, this role pays about $162k versus about $171k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Security Control Assessor

JOB TITLE: Security Control Assessor The Security Control Assessor joins a team dedicated to supporting a government client with high operational tempo and complex cyber operations. In this role, you will perform in-depth security control assessments across complex systems, validating implemented controls, identifying missing details, and assessing residual risk. You will guide stakeholders through the Risk Management Framework, execute comprehensive assessments, and deliver authoritative reports to inform authorization decisions. Key responsibilities include implementing infrastructure and cybersecurity controls, performing risk and vulnerability assessments in network, system, and application areas, and leveraging big data analytics to identify advanced threats. Required expertise includes NIST SP 800-53, technical testing, and the network accreditation process. Preferred skills include experience with AWS, Oracle, Microsoft, or Google cloud providers, Xacta, Nessus, Rapid7, and Nipper.

What you'll do

  • Review and validate the effectiveness of security controls across complex technical environments.
  • Conduct comprehensive security control assessments including documentation reviews, interviews, and technical testing.
  • Identify security deficiencies and assess residual risks to inform authorization decisions.
  • Guide stakeholders through the Risk Management Framework (RMF) process.
  • Deliver authoritative assessment reports and recommend remediation strategies to strengthen security posture.
  • Perform risk and vulnerability assessments across network, system, and application areas.
  • Implement infrastructure and cybersecurity controls to improve detection and vulnerability capabilities.
  • Use big data analytics to identify advanced threats or indicators of compromise.

What we're looking for

  • TS/SCI clearance with a polygraph is required.
  • High school diploma or GED is required.
  • 5+ years of experience using and applying the NIST Special Publication (SP) 800-53 is required.
  • Experience conducting security control assessments, including documentation review, interviews, and technical testing is required.
  • Knowledge of technology security controls and the network accreditation process is required.
  • Experience with cloud networking providers including AWS, Oracle, Microsoft, or Google (preferred).
  • Experience with assessment or authorization tools such as Xacta (preferred).
  • Experience with scanning tools including Nessus, Rapid7, or Nipper (preferred).

More like this

Similar roles

Security Control Assessor

Booz Allen Hamilton

Herndon, VA 12 days ago $99,000–$225,000
Risk Management Framework (RMF) AWS Cloud Security Vulnerability Assessment Nessus Rapid7 Nipper Xacta Big Data Analytics Security Engineering Event Correlation POA&M Cybersecurity Hygiene

Security Control Assessor

Leidos

Alexandria, VA +2 27 days ago $69,550–$125,725
RMF STIGs eMASS Nessus ACAS SCAP HBSS NIST SP 800-53 NIST SP 800- 37 CNSSI 1253 Vulnerability Assessment Cyber Threat Emulation Cloud Native Tools Windows UNIX Network Security Endpoint Security Solutions Databases TTPs
5+ yrs exp

Security Control Assessor, Lead

Booz Allen Hamilton

Alexandria, VA +1 41 days ago
DoD RMF NIST SP 800-53 eMASS STIG SCAP ACAS POA&M AWS Linux Windows Containerization Vulnerability Management Security Control Assessment Continuous Monitoring SharePoint Technical Writing Security Engineering
8+ yrs exp

Security Control Assessor, Lead

Booz Allen Hamilton

Alexandria, VA +1 34 days ago
DoD RMF NIST SP 800-53 eMASS STIG SCAP ACAS POA&M AWS Windows Linux Containerization Vulnerability Management Security Control Assessment Continuous Monitoring SharePoint Security Engineering Risk Assessment
8+ yrs exp

Information Systems Security Engineer

Booz Allen Hamilton

Herndon, VA 6 days ago $99,000–$225,000
AWS Kubernetes NIST NMAP Nessus Rapid7 Nipper Containerization Cloud Security Network Security Vulnerability Assessment Big Data Analytics Security Control Frameworks Oracle
5+ yrs exp

RMF Cybersecurity Engineer

Booz Allen Hamilton

Fort Meade, MD 95 days ago
Risk Management Framework NIST 800-53 ACAS eMASS Vulnerability Assessment Network Security System Administration Cybersecurity Big Data Analytics Security+ CySA+ SSCP GSEC CND CICSP Event Correlation Infrastructure Controls