Security Control Assessor with Security Clearance
Not Disclosed•Full-TimeOn-site
location_onThe Beacon Clarendon, 1128, North Irving Street, Clarendon, Arlington, Arlington County, Virginia, 22201, United States
About the Opportunity
Zachary Piper Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to support a high-visibility National Security contract in Arlington, VA. This is a 100% onsite role designed for a cybersecurity expert capable of navigating the complexities of the Department of Defense (DoD) environment.
The Senior SCAR will play a critical role in evaluating system security posture and advising Authorizing Officials (AOs) on cutting-edge AI/ML and data-driven mission systems. You will be responsible for delivering independent risk determinations that support Authority to Operate (ATO) decisions, ensuring compliance while articulating real-world risk across complex enterprise environments. This position offers the chance to provide strategic advisory support to senior DoD leadership, Program Managers, and military officials on authorization outcomes and overall risk posture.
Day in the Life
In this role, you will lead the execution of the Risk Management Framework (RMF), applying DoD methodologies to identify baselines and evaluate controls. Your day-to-day activities will involve developing Security Assessment Plans, executing control assessments, and producing comprehensive Security Assessment Reports. You will track POA&M activities, validate remediation efforts, and reassess residual risk to ensure continuous security.
You will also evaluate modern system architectures, analyzing network diagrams to assess security impacts across enterprise environments. This includes assessing security integration within DevSecOps pipelines, CI/CD workflows, and cloud-hosted systems (AWS, Azure, GCP). A key part of your mission is to brief stakeholders, presenting authorization status and risk recommendations to Senior Executive Service (SES) and military leadership.
Application Instructions
Candidates must possess an active Top Secret clearance (SCI eligible required) and relevant certifications (IAT/IAM II). To apply, please submit your resume highlighting your experience with end-to-end A&A activities, GRC tools (eMASS, Xacta), and cloud compliance. Zachary Piper Solutions is an equal opportunity employer committed to building a diverse workforce.
Work location
Work model: On-site
The Beacon Clarendon, 1128, North Irving Street, Clarendon, Arlington, Arlington County, Virginia, 22201, United States
Arlington, Virginia
Key Responsibilities
- check_circleLead risk assessments and provide independent risk determinations to Authorizing Officials
- check_circleDevelop Security Assessment Plans, execute control assessments, and produce Security Assessment Reports
- check_circleApply DoD RMF methodologies to identify baselines and evaluate system security controls
- check_circleTrack POA&M activities, validate remediation efforts, and reassess residual risk
- check_circlePrepare Risk Recommendation Briefs, AO Determination packages, and continuous monitoring strategies
- check_circleAnalyze system and network diagrams to assess security impacts across enterprise environments
- check_circleEvaluate security integration within DevSecOps pipelines, CI/CD workflows, and cloud-hosted systems
- check_circleEnsure alignment with NIST, DoD, ISO, and cybersecurity best practices
- check_circle
Requirements
- verified10+ years of cybersecurity experience
- verifiedBachelor's degree in Cybersecurity, IT, CS, or related field (Master's preferred)
- verifiedActive TS clearance (SCI eligible required)
- verifiedActive IAT/IAM II Certification
Nice to Have
Master's degree in Cybersecurity, Information Technology, Computer Science, or related field.
Benefits & Perks
check_circleMedical, Dental, and Vision insurancecheck_circle401k Plancheck_circleHolidayscheck_circleSick leave as required by law
Similar Job Opportunities
Skills, education and keywords
Skills: Do D RMF, Nist, Iso, Aws, Azure, GCP, Devsecops, Ci/cd, Emass, Xacta.
Education: Bachelor's degree in Cybersecurity, IT, or Computer Science required; Master's degree preferred or equivalent experience.
Frequently asked questions about Security Control Assessor with Security Clearance at Zachary Piper Solutions
What does a Security Control Assessor with Security Clearance at Zachary Piper Solutions do?expand_more
Day-to-day, the Security Control Assessor with Security Clearance at Zachary Piper Solutions will lead risk assessments and provide independent risk determinations to authorizing officials; develop security assessment plans, execute control assessments, and produce security assessment reports; apply dod rmf methodologies to identify baselines and evaluate system security controls; and track poa&m activities, validate remediation efforts, and reassess residual risk.
What are the requirements for this Security Control Assessor with Security Clearance role?expand_more
Zachary Piper Solutions is looking for candidates who meet the following requirements: 10+ years of cybersecurity experience; Bachelor's degree in Cybersecurity, IT, CS, or related field (Master's preferred); Active TS clearance (SCI eligible required); and Active IAT/IAM II Certification.
Where is the Security Control Assessor with Security Clearance role at Zachary Piper Solutions located?expand_more
Security Control Assessor with Security Clearance at Zachary Piper Solutions is based in The Beacon Clarendon, 1128, North Irving Street, Clarendon, Arlington, Arlington County, Virginia, 22201, United States. This is a on-site role.
Is this Security Control Assessor with Security Clearance job remote, hybrid, or on-site?expand_more
Zachary Piper Solutions has listed this Security Control Assessor with Security Clearance role as on-site.
How much experience is required for this Security Control Assessor with Security Clearance role?expand_more
Security Control Assessor with Security Clearance at Zachary Piper Solutions typically requires 10+ years of relevant experience at the lead level.
What skills do you need for the Security Control Assessor with Security Clearance role at Zachary Piper Solutions?expand_more
Key skills for Security Control Assessor with Security Clearance at Zachary Piper Solutions include Do D RMF; Nist; Iso; Aws; Azure; GCP; Devsecops; and Ci/cd.
What education is required for Security Control Assessor with Security Clearance at Zachary Piper Solutions?expand_more
Educational requirements for this role: Bachelor's degree in Cybersecurity, IT, or Computer Science required; and Master's degree preferred or equivalent experience.
What category does the Security Control Assessor with Security Clearance role belong to?expand_more
Security Control Assessor with Security Clearance at Zachary Piper Solutions is part of the it job category on Recrutus.