Senior Security Control Assessor

Senior Security Control Assessor

Job Location:

US

Job :

Job Type: Contingent Upon Prime/Customer Acceptance

Category:
Cyber and Information Security

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely.

We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

Join the SkyePoint team and become part of a highly skilled, professional workforce dedicated to delivering mission‑critical solutions. Our exceptional technical experts provide innovative services and solutions to federal agencies, making a meaningful impact every day. At SkyePoint, we value top talent and foster an environment where your ideas and contributions truly matter. Be part of a team that values excellence and rewards innovation – your future starts here!

• Perform security reviews to identify architectural gaps and provide recommendations for risk mitigation.
• Conduct risk analyses (e.g., threats, vulnerabilities, probability of occurrence) during significant system/application changes.
• Plan and execute security authorization reviews, assurance case development, and audits for system installations and networks.
• Provide input to the Risk Management Framework (RMF) and related documentation, including lifecycle support plans, CONOPS, and operational procedures.
• Review authorization packages and assurance documents to confirm risk levels are acceptable for systems, applications, and networks.
• Verify that system, network, and application security postures are implemented as designed, documenting deviations and recommending corrective actions.
• Assess the effectiveness of implemented security controls across management, operational, and technical areas.
• Support compliance activities by ensuring security configuration guidelines and standards are followed.
• Evaluate configuration management and release processes for security impacts.
• Define/document how new systems or interfaces affect the organization's current security posture.
• Develop security compliance processes and perform audits of external services (e.g., CSPs, data centers).
• Ensure Plans of Action & Milestones (POA&Ms) and remediation plans are established for vulnerabilities.
• Participate in Risk Governance processes by presenting risks, mitigations, and technical assessments.
• Support acquisition and procurement efforts to ensure information security requirements are integrated.
• Produce reports, briefings, and technical documentation reflecting assessment results and recommendations.

• Must be able to obtain a High Risk/Public Trust Security Clearance.
• 7+ years of relevant IT/cybersecurity experience.
• Certification in one of the following: A+, Net+, or Security+.
• Degree in a technical/cyber-related field (or equivalent experience/certifications).
• Proficiency in assessing security controls against standards (e.g., NIST SP 800-53, CIS CSC, Cybersecurity Framework).
• Strong skills in vulnerability scanning, penetration testing principles, and interpreting results.
• Ability to conduct risk, impact, and compliance assessments.
• Skill in technical documentation, briefings, and audit reporting.
• Proficiency in security architecture review and system design evaluation.
• Knowledge of secure coding principles and application security (e.g., OWASP Top 10).
• Experience applying confidentiality, integrity, availability, authenticity, and non‑repudiation principles to systems and networks.
• Familiarity with compliance frameworks and security assessment tools.
• Strong analytical, technical writing, and communication skills are essential.
• Knowledge of Risk Management Framework (RMF) and Security Assessment &…