M9 Solutions
SecurityControlAssessor
Neural analysis suggests this role is
optimal for Mid+ candidates.
“Security Control Assessor at M9 Solutions. Skills: Risk Management Framework, Security control assessment, NIST RMF. Evaluate security controls. Test security controls”
What You'll Achieve.
Provide tailored documentation; Verify implementation of remediation actions
Industry & Context.
Identify vulnerabilities; Identify weaknesses; Identify potential risks; Analyze vulnerability scans
Onsite in Washington, DC, Active Secret clearance
What They're Looking For.
Must Have
Active Secret clearance, Bachelor's degree or equivalent experience, CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, NIST RMF implementation guidance, eMASS or similar tools, Analyzing vulnerability scans, STIG implementations
Nice to Have
Systems Development Lifecycle (SDLC), Systems Engineering Lifecycle (SELC), Cybersecurity Information Assurance experience, Hands-on experience researching, writing, and submitting documentation packages for new system authorizations
What You'll Do.
Evaluate security controls
Test security controls
Validate security controls
Provide tailored documentation
Act as independent assessor
Plan security control assessments
Execute security control assessments
Develop assessment procedures
Maintain assessment methodologies
Analyze control effectiveness
Evaluate control effectiveness
Identify vulnerabilities
Identify potential risks
Prepare Security Assessment Reports
Collaborate with system owners
Collaborate with ISSOs
Verify remediation actions
Conduct follow-up assessments
Provide expert advice
Develop System Security Plans
Maintain System Security Plans
Develop Plans of Action
Maintain Plans of Action
Stay current with threats
Stay current with technologies
Stay current with best practices
Validate security control implementation
Perform continuous monitoring
Examine security control weaknesses
Determine desired intent
How You'll Work.
Team & Collaboration
System owners; ISSOs; Stakeholders
Communication Scope
Documentation; Reporting
Process & Methodology
Project Management, Program Management
Full Job Description
M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations that desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions, Data Delivery & Analytics, Cyber Security, Cloud Migration, Applications and Infrastructure, Software Development, and Finance & Accounting. M9 Solutions is seeking a Security Control Assessor to work onsite in support of a government contract for a client located in Washington, DC. An active Secret clearance is required. Responsibilities Evaluate, test, and validate the effectiveness of security controls within our organization's information systems and networks, with a strong emphasis on applying the Risk Management Framework (RMF). Provide the client with tailored documentation to support their security authorization. Independent assessor for Risk Management Framework Steps 0 to 7. Plan and execute security control assessments for various information systems within the organization. Develop and maintain assessment procedures and methodologies aligned with NIST guidelines and other relevant frameworks. Analyze and evaluate the effectiveness of implemented security controls. Identify vulnerabilities, weaknesses, and potential risks in information systems and infrastructure. Prepare detailed Security Assessment Reports (SARs) documenting findings and recommendations. Collaborate with system owners, ISSOs, and other stakeholders throughout the assessment process. Verify the implementation of remediation actions and conduct follow-up assessments as needed. Provide expert advice on the development and maintenance of System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms). Stay current with evolving cybersecurity threats, technologies,
Applying for this Security Control Assessor role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Greenhouse
- Create a Greenhouse profile before applying — it saves time across multiple applications.
- Upload your resume as a PDF; the parser handles it better than Word.
- Answer all knockout questions carefully — wrong answers auto-reject before a human sees you.
- Enable email notifications to track application status in real time.
ANONYMOUS · UNFILTERED
What do employees actually say about M9 Solutions?
Real rants from real employees. Read before you apply.