Security Control Assessor

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Herndon, VA
Salary
$99,000–$225,000 / yr
Employment
Full-time
Posted
12 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $171k
This role $162k
$84k $240k
below market most similar roles pay here above market

This role pays less than 52% of similar roles. Most pay $134,500–$206,925 — the blue band above. At the midpoint, this role pays about $162k versus about $171k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Security Control Assessor

The Security Control Assessor joins a team dedicated to supporting a government client by evaluating security controls and ensuring compliance across complex technical environments. The role involves performing in-depth security control assessments, validating implemented controls, and identifying missing details to support authorization decisions. Key responsibilities include conducting risk and vulnerability assessments across network, system, and application areas, as well as implementing infrastructure and cybersecurity controls to improve detection and event correlation. The position requires expertise in NIST Special Publication 800-53, the Risk Management Framework, and technical testing. Candidates should possess skills in big data analytics and knowledge of cloud security postures. Preferred experience includes using tools like Xacta, Nessus, Rapid7, or Nipper, along with familiarity with AWS, Oracle, Microsoft, or Google cloud networking providers.

What you'll do

  • Perform in-depth security control assessments across complex systems and cloud architectures.
  • Validate implemented security controls by reviewing documentation, conducting interviews, and performing technical testing.
  • Identify security weaknesses and missing details to recommend specific remediation strategies.
  • Guide stakeholders through the Risk Management Framework (RMF) to support authorization decisions.
  • Deliver authoritative assessment reports that document findings and inform the overall security posture.
  • Perform risk and vulnerability assessments across network, system, and application areas.
  • Use big data analytics and security event types to identify advanced threats or indicators of compromise.
  • Monitor and assess risk on Plans of Action and Milestones (POA&M) items.

What we're looking for

  • High school diploma or GED.
  • TS/SCI clearance with a polygraph.
  • 5+ years of experience using and applying the NIST Special Publication (SP) 800-53.
  • Experience conducting security control assessments, including documentation review, interviews, and technical testing.
  • Knowledge of technology security controls and the network accreditation process.
  • Experience with cloud networking providers including AWS, Oracle, Microsoft, or Google (preferred).
  • Experience with assessment or authorization tools such as Xacta (preferred).
  • Experience with scanning tools including Nessus, Rapid7, or Nipper (preferred).

More like this

Similar roles

Security Control Assessor

Booz Allen Hamilton

Herndon, VA 14 days ago $99,000–$225,000
Risk Management Framework (RMF) Cloud Security Vulnerability Assessment Security Control Assessment AWS Oracle Microsoft Google Xacta Nessus Rapid7 Nipper Big Data Analytics Cybersecurity Hygiene POA&M Security Engineering

Security Control Assessor

Leidos

Alexandria, VA +2 27 days ago $69,550–$125,725
RMF STIGs eMASS Nessus ACAS SCAP HBSS NIST SP 800-53 NIST SP 800- 37 CNSSI 1253 Vulnerability Assessment Cyber Threat Emulation Cloud Native Tools Windows UNIX Network Security Endpoint Security Solutions Databases TTPs
5+ yrs exp

Security Control Assessor, Lead

Booz Allen Hamilton

Alexandria, VA +1 41 days ago
DoD RMF NIST SP 800-53 eMASS STIG SCAP ACAS POA&M AWS Linux Windows Containerization Vulnerability Management Security Control Assessment Continuous Monitoring SharePoint Technical Writing Security Engineering
8+ yrs exp

Security Control Assessor, Lead

Booz Allen Hamilton

Alexandria, VA +1 34 days ago
DoD RMF NIST SP 800-53 eMASS STIG SCAP ACAS POA&M AWS Windows Linux Containerization Vulnerability Management Security Control Assessment Continuous Monitoring SharePoint Security Engineering Risk Assessment
8+ yrs exp

Information Systems Security Engineer

Booz Allen Hamilton

Herndon, VA 6 days ago $99,000–$225,000
AWS Kubernetes NIST NMAP Nessus Rapid7 Nipper Containerization Cloud Security Network Security Vulnerability Assessment Big Data Analytics Security Control Frameworks Oracle
5+ yrs exp

Cybersecurity Engineer and Risk Analyst

Booz Allen Hamilton

San Diego, CA 69 days ago
Risk Management Framework (RMF) ACAS STIG eMASS Vulnerability Assessment Network Security Big Data Analytics Windows Linux Firewalls Intrusion Prevention Systems Data Flow Diagrams Boundary Diagrams Cybersecurity Compliance Security Assessment Plans (SAP)
4+ yrs exp