Security Control Assessor, Lead

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Alexandria, VAAberdeen Proving Ground, MD
Employment: Full-time
Posted: 49 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $173k

$117k $229k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $151,700–$195,000.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1781 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 898 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Security Control Assessor, Lead

Role Posting Log in to save

The Security Control Assessor, Lead directs the SCA workstream, providing independent cybersecurity assessment leadership for CDAO systems and environments. This role owns the assessment strategy, quality standards, and risk adjudication while overseeing the development of Security Assessment Plans and Reports. Day-to-day responsibilities include administering eMASS, analyzing STIG, SCAP, and ACAS findings, and leading independent assessments in accordance with DoD RMF and NIST guidance. The Lead manages the Body of Evidence documentation and coordinates with system owners, engineers, and developers to evaluate complex enterprises, including cloud, hybrid, and containerized data. Required technical skills include experience with Windows, Linux, AWS Cloud, and containerization. The role solves the business problem of ensuring authorization readiness and managing residual cybersecurity risk across diverse technical architectures and mission-critical systems.

Skills

DoD RMF NIST SP 800-53 eMASS STIG SCAP ACAS POA&M AWS Linux Windows Containerization Vulnerability Management Security Control Assessment Continuous Monitoring SharePoint Technical Writing Security Engineering

What you'll do

Lead independent security control assessments in accordance with DoD RMF and NIST guidance.
Develop and govern the assessment approach, schedule, evidence standards, and quality-control framework.
Review and approve Security Assessment Plans (SAPs) and Security Assessment Reports (SARs) for technical accuracy.
Analyze STIG, SCAP, and ACAS findings to evaluate system boundaries, data flows, and inherited controls.
Develop RMF Body of Evidence (BOE) documentation and input data into eMASS or approved databases.
Brief findings, systemic risks, and remediation priorities to senior stakeholders and Authorizing Officials.
Oversee assessment execution for ATOs, reauthorizations, annual assessments, and continuous monitoring activities.
Mentor assessors and calibrate assessment judgments to ensure independence and objectivity across the lifecycle.

What we're looking for

Bachelor's degree in an Engineering or Cyber field.
8+ years of experience with cybersecurity, including DoD or federal RMF, security assessment, security engineering, or authorization.
Experience with eMASS, analyzing STIG, SCAP, and ACAS findings, POA&Ms, architecture, inherited controls, compensating controls, and technical evidence.
Experience leading security control assessments and producing or approving SSPs, SAPs, SARs, POA&Ms, risk assessments, and authorization packages.
Experience with administration of Windows, Linux, AWS Cloud, and containerization systems and software configuration.
Knowledge of NIST SP 800-53, NIST SP 800-37, DoD RMF, STIGs, vulnerability management, and security-control assessment methodology.
Experience with technical writing, facilitation, quality-assurance, team leadership, and stakeholder-management capabilities.
TS/SCI clearance.

Similar roles

Security Control Assessor, Lead

Booz Allen Hamilton

Alexandria, VA +1 42 days ago

DoD RMF NIST SP 800-53 eMASS STIG SCAP ACAS POA&M AWS Windows Linux Containerization Vulnerability Management Security Control Assessment Continuous Monitoring SharePoint Security Engineering Risk Assessment

8+ yrs exp

Save

Security Control Assessor

Booz Allen Hamilton

Herndon, VA 22 days ago $99,000–$225,000

Risk Management Framework (RMF) Cloud Security Vulnerability Assessment Security Control Assessment AWS Oracle Microsoft Google Xacta Nessus Rapid7 Nipper Big Data Analytics Cybersecurity Hygiene POA&M Security Engineering

Save

Security Control Assessor

Booz Allen Hamilton

Herndon, VA 20 days ago $99,000–$225,000

Risk Management Framework (RMF) AWS Cloud Security Vulnerability Assessment Nessus Rapid7 Nipper Xacta Big Data Analytics Security Engineering Event Correlation POA&M Cybersecurity Hygiene

Save

Security Controls Assessor

Booz Allen Hamilton

San Diego, CA 86 days ago $99,000–$225,000

Risk Management Framework Cybersecurity Information Security Cross Domain Solutions Virtualization Artificial Intelligence Machine Learning Operational Technology Information Technology Security Controls Assessment

10+ yrs exp

Save

Security Control Assessor II

General Dynamics

Ogden, UT 112 days ago $129,965–$175,835

Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Assurance Cybersecurity Information Security Management Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) Information System Security SAP SCI Confidentiality Integrity Availability

7+ yrs exp

Save

Security Control Assessor I

General Dynamics

Colorado Springs, CO 71 days ago $129,813–$158,815

Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Security Cybersecurity System Security Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) CISSP CASP+ CE CCNP Security CISA IAM Level 1 IAT Level 3

5+ yrs exp

Save