Security Assessor

This is a Fully Remote Job

About Our Client:

The organization operates within the government operations and cybersecurity sector, supporting large-scale federal programs by leveraging advanced technology. It addresses challenges around ensuring security and compliance of information systems within federal regulations and guidelines, facilitating secure, resilient environments for government programs.

About the Opportunity:

The SECURITY ASSESSOR role is focused on evaluating and enhancing the security posture of federal information systems. This position is responsible for assessing security controls, conducting audits, and developing secure architectures that comply with federal standards. The role collaborates with various stakeholders to maintain system confidentiality, integrity, and availability, ensuring compliance and risk management that supports the continuity and security of government operations.

Responsibilities:

• Conduct security control assessments for federal information systems to ensure regulatory compliance.
• Prepare and present security assessment reports to management and stakeholders.
• Develop and maintain secure system architecture designs aligned with federal security standards.
• Collaborate with cloud architects and developers to integrate security controls.
• Implement security by design principles across software and infrastructure.
• Perform risk assessments and develop mitigation strategies per government standards.
• Maintain accurate security documentation, including System Security Plans and RMF artifacts.
• Conduct vulnerability assessments and penetration testing; remediate identified weaknesses.
• Assist in preparing Authorization and Accreditation packages under NIST RMF.
• Work with Authorizing Officials to ensure timely system authorization and status updates.
• Support incident response efforts, including investigations and reporting of security incidents.
• Lead forensic investigations and recommend corrective actions.
• Prepare post-incident reports to prevent recurrence.
• Develop and deliver security awareness training to program staff and stakeholders.
• Promote a security-first culture within the program.
• Perform other duties as assigned.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, or equivalent experience.
• Minimum 5 years cybersecurity experience in security architecture or assessment within a federal or government environment.
• Preferred certifications: CISA or CEH; CISM or CCSP considered a plus; CISSP or equivalent knowledge.
• Ability to pass a Public Trust Background Investigation.
• Proficient in NIST RMF, FISMA, FedRAMP, and federal security frameworks.
• Knowledge of cloud security architectures in Microsoft Azure and/or AWS.
• Experience with vulnerability management, penetration testing, forensic tools.
• Familiarity with SIEM tools, security monitoring, and incident response frameworks.

Pay Range and Compensation Package:

• The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.

Benefits & Perks:

• Medical insurance
• Dental insurance
• 401(k) retirement plan
• Paid maternity leave
• Paid paternity leave

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.