Expert Security Controls Assessor
Listed on 2026-10-18
-
IT/Tech
Cybersecurity, Information Security & Data Protection
Join a culture of empowerment and connectivity.
Develop your craftLearn the skills you need to accelerate your career.
Discover benefits that support your life and work.
Innovate with intentionBuild mission-ready tech that protects the nation.
Assists in designing, implementing, and managing policies and procedures to ensure database and software security. Applies leading-edge principles, theories, and concepts, contributes to the development of new principles and concepts. Works on unusually complex problems and provides highly innovative solutions. Operates with substantial latitude for unreviewed action or decision, mentors or supervises employees in both company and technical competencies.
You Have:
- 14+ years of experience in cybersecurity or information security fields
- Knowledge of NIST Special Publication 800-53, the associated security controls, and DoD-Specific implementations of the related Risk Management Framework process for system authorizations
- Knowledge of the DoW, it's components and the varied authorities and responsibilities of each component-type
- Ability to assess the relevant controls within operational systems, including Operational technology and information technology systems
- Ability to review of broad scope technical implementations for a wide array of disparate or disconnected systems, including capabilities such as cross domain solutions, layered defensive techniques, on premises, cloud or hybrid solutions, virtualization, Artificial Intelligence/Machine Learning (AI/ML), or robotic processing
- Ability to maintain a professional bearing in high pressure situations
- Ability to clearly and concisely communicate factual information regarding information systems, relevant implementation of security controls and their overall impact on system security
- TS/SCI clearance
- Bachelor's degree
Nice If You Have:
- Experience conducting security controls assessment of operational DoW systems
- Knowledge of the Joint Special Access Program Implementation Guide
- Ability to work independently, while still maintaining a constant flow of communication to other team members and government clients
- Master's degree in IT, Cybersecurity, Engineering or Information Security fields
- CISSP, CASP, or other expert-level Cybersecurity Certifications
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.
Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about your total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $ (annualized USD). The estimate displayed represents the typical salary range for this position…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).