ZipRecruiter

Log In

2

Entry Level Security Controls Assessor Jobs in Virginia

Carahsoft Technology Corp

Apply for Position

Reston, VA · On-site

$40K - $50K/yr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

BACK TO CAREERS Security Operations Specialist Carahsoft seeks an entry level Security Operations ... Set up phishing simulations to assess and improve the organization's resilience to phishing attacks.

VTG

Cyber Security Systems Engineer

Chantilly, VA · On-site

$59.25 - $72.50/hr

... Controls Assessors (SCA) and Information System Security Officers/Managers (ISSO/M) during A&A reviews and assessments • Track and manage Plans of Action and Milestones (POA&Ms), including ...

previous pagenext page

Showing results 21-40

All JobsSecurity Controls Assessor JobsEntry Level Security Controls Assessor JobsEntry Level Security Controls Assessor Jobs in Virginia

Entry Level Security Controls Assessor information

See Virginia salary details

$8

$58

$77

How much do entry level security controls assessor jobs pay per hour?

As of Aug 14, 2026, the average hourly pay for entry level security controls assessor in Virginia is $58.26, according to ZipRecruiter salary data. Most workers in this role earn between $50.05 and $67.45 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as an entry level security controls assessor?

To thrive as an Entry Level Security Controls Assessor, you typically need foundational knowledge of cybersecurity principles, risk management frameworks, and a relevant degree such as in information technology or cybersecurity. Familiarity with tools like NIST SP 800-53, vulnerability scanners, and compliance management systems, as well as certifications such as CompTIA Security+ or CAP, are often expected. Strong analytical thinking, attention to detail, and clear written and verbal communication skills help you excel in performing assessments and documenting findings. These skills and qualifications are crucial for accurately evaluating security controls, ensuring regulatory compliance, and effectively communicating risks and recommendations to stakeholders.

What are some common challenges faced by entry level security controls assessors during their initial projects?

Entry level Security Controls Assessors often encounter challenges such as quickly learning to interpret complex regulatory frameworks (like NIST or FedRAMP), understanding the technical environment of the organization, and effectively communicating findings to both technical and non-technical stakeholders. Adapting to varying documentation standards and balancing multiple concurrent assessments can also be demanding. However, these challenges provide valuable learning opportunities and are typically supported by mentorship from senior team members and structured onboarding processes.

What is an entry level security controls assessor?

Entry Level Security Controls Assessors are professionals who help organizations evaluate and maintain their security controls to ensure compliance with relevant standards and regulations. They typically assist with reviewing security policies, conducting risk assessments, and verifying that technical and administrative safeguards are in place. This role is often an introduction to cyber risk management and compliance, providing foundational experience in identifying vulnerabilities and supporting remediation efforts. Entry level assessors usually work under the supervision of more experienced security professionals and may support audits, documentation, and reporting tasks.

What is the difference between Entry Level Security Controls Assessor vs Security Analyst?

AspectEntry Level Security Controls AssessorSecurity Analyst
CertificationsCompTIA Security+, CISSP (entry-level), Security+CompTIA Security+, CISSP (entry-level), Security+
Work EnvironmentAudit and compliance settings, government agencies, consulting firmsIT departments, cybersecurity teams, corporate environments
Primary FocusAssessing security controls, compliance checks, vulnerability identificationMonitoring security, incident response, threat analysis

While both roles involve cybersecurity fundamentals, the Entry Level Security Controls Assessor primarily focuses on evaluating security controls and ensuring compliance, often in audit or assessment settings. In contrast, a Security Analyst concentrates on monitoring security systems, analyzing threats, and responding to incidents within an organization. Both roles require similar certifications and work environments but differ in their core responsibilities and daily tasks.

What are popular job titles related to Entry Level Security Controls Assessor jobs in Virginia?

For Entry Level Security Controls Assessor jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Entry Level Security Controls Assessor jobs in Virginia look for?

The top searched job categories for Entry Level Security Controls Assessor jobs in Virginia are:

Entry Level Security Controls Assessor jobs near you
Infographic showing various Entry Level Security Controls Assessor job openings in Virginia as of August 2026, with employment types broken down into 86% Full Time, 12% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $121,188 per year, or $58.3 per hour.

Cybersecurity Systems Engineer (Entry Level to SME) TS/SCI with with Security Clearance

CGI

Arlington, VA • On-site

$66 - $81/hr

Other

Posted 21 days ago

CGI rating

7.1

Company rating: 7.1 out of 10

Based on 19 frontline employees who took The Breakroom Quiz

148th of 223 rated it services

Job description

Position Description: CGI Federal has an exciting opportunity for Cybersecurity Systems Engineers within our Intel sector advancing the national security mission through cutting edge technology. You must have a passion for keeping pace with rapidly evolving technology advancements and leveraging your knowledge on a highly collaborative team to deliver state-of-the-art capabilities. The Cybersecurity Systems Engineer supports senior staff in maintaining and securing an organization's IT infrastructure. They assist in configuring security controls, monitoring for threats, and documenting system policies, acting as a foundational builder of daily cyber defenses. CGI Federal is growing its high-performance team whose members share a passion for building high-quality, scalable, advanced IT solutions in a collaborative, fast-paced, outcome-driven mission. This position is located in our Arlington office; however, a hybrid working model is acceptable. Your future duties and responsibilities: Key Responsibilities (Entry Level)
• System Maintenance: Assist in maintaining and upgrading basic security software (e.g., antivirus, firewalls, endpoint protection).
• Monitoring: Help monitor networks and servers for unusual activity or policy violations.
• Vulnerability Management: Run routine vulnerability scans and help patch outdated software.
• Documentation: Write and organize technical reports, standard operating procedures, and security system documentation.
• Incident Support: Assist senior engineers during security investigations by gathering logs and basic data. Key Responsibilities (Junior Level)
• Security Administration: Assist in the operation, configuration, and maintenance of host-based, network-based, and cloud-based security systems.
• System Hardening: Implement and maintain hardware and software configuration management processes to ensure systems are secured per industry best practices (e.g., DISA STIGs if applicable).
• Monitoring & Triage: Monitor security logs, analyze event alerts, and manage ticket queues for system and security issues.
• Vulnerability Management: Perform vulnerability assessments and risk analyses to identify weaknesses and prioritize patches or remediation.
• Documentation & Compliance: Help maintain technical security documentation, support Assessment and Authorization (A&A) activities, and track compliance.
• Incident Response: Participate in the tactical execution of the Cyber Incident Response Team (CIRT) by investigating suspicious activity on servers and securing system boundaries. Key Responsibilities (Mid-Level)
Systems Engineering & Secure Architecture
• Design, implement, and maintain Commercial-off-the-Shelf (COTS) and custom security products, including firewalls, SIEM tools, and identity management systems.
• Deploy and secure software applications within virtualized infrastructures and highly distributed cloud computing environments.
• Manage and secure endpoint baselines across operating systems like Linux (Red Hat, Ubuntu) and Windows.
• Participate in Agile/DevSecOps teams to automate security testing and integrate security controls into CI/CD pipelines.
Security Operations & Threat Management
• Conduct static and dynamic source code analysis (SAST/DAST) and manage application vulnerabilities as technical debt within backlogs.
• Perform root cause analysis on security incidents and proactively recommend mitigations to strengthen the overall security posture.
• Coordinate vulnerability scanning, patch management, and threat hunting across enterprise and operational environments.
Governance, Risk, and Compliance (GRC) • Implement and audit technical controls against rigorous compliance frameworks such as NIST SP 800-53, NIST 800-171, or CMMC Level 2.
• Prepare and execute testing procedures for assessing conformance with DoD, Federal Civilian, or Intelligence Community requirements.
• Draft and maintain essential systems engineering documentation, including System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and Interface Control Documents (ICDs). Key Responsibilities (Senior Level)
• Advanced Architecture: Architect, implement, and validate integrated hardware/software/firmware security solutions for highly complex environments (e.g., aerospace, cloud, or enterprise).
• Attack Surface Analysis (ASA): Perform attack surface analyses and decompose system-level security controls into technical performance requirements across disciplines like Anti-Tamper and cryptography.
• Cloud & DevOps Security: Design zero-trust environments, implement Infrastructure as Code (IaC) via Terraform, and securely deploy Mission Unique Software (MUS) in highly virtualized clouds.
• Risk Management Framework (RMF): Lead the RMF process from system categorization to continuous monitoring (ConMon), ensuring compliance with strict federal or commercial controls.
• Vulnerability & Flaw Remediation: Triage findings from Static Code Analysis (SCA) and establish technical debt in the software backlog.
• Continuous Monitoring: Utilize tools like ACAS to conduct comprehensive vulnerability scanning, patch management, and assess deviation mitigations.
• Incident Response & Ethical Hacking: Design and deploy security systems like SIEM, EDR, and XDR. Support tactical execution during critical incidents or cyber test & evaluation.
• Automation: Automate repetitive security tasks and identity workflows. Experience with scripting in Python or PowerShell is strongly required. Key Responsibilities (SME Level)
• Security Architecture & Design: Architect enterprise-wide cyber systems and embed security into the design of hardware, software, and network components across OSI layers.
• Risk & Compliance: Manage Risk Management Framework (RMF) activities, including Attack Surface Analyses (ASA), Security Control Traceability Matrices (SCTM), and Plans of Action & Milestones (POA&Ms).
• Vulnerability & Threat Management: Conduct advanced risk assessments, threat modeling, static code analysis (SCA) triaging, and flaw remediation.
• Incident Response & Forensics: Lead tactical Cyber Incident Response Team (CIRT) operations, perform forensic preservation, and resolve non-standard vulnerabilities.
• Leadership & Mentorship: Act as the technical point of contact, lead design reviews with stakeholders, and mentor junior or mid-level engineering staff. Required qualifications to be successful in this role: All levels require an active TS/SCI with Poly Entry Level:
• Education: o High School Diploma/GED with 4 years of relevant experience,
o Associates Degree with 2 years of relevant experience, o or Bachelor's Degree with 0 years of relevant experience
• Certifications: Foundational certifications such as CompTIA Security+, Network+, or similar vendor-specific badges.
• Skills: Basic understanding of networking protocols, operating systems (Windows/Linux), and fundamental security concepts. Junior Level/Moderate:
• Education: o High School Diploma/GED with 6 years of relevant experience,
o Associates Degree with 4 years of relevant experience, o Bachelor's Degree with 2 years of relevant experience, o or Masters Degree with 0 years of relevant experience
• Technical Knowledge: Understanding of operating systems (Windows/Linux), network protocols (TCP/IP), and security platforms like SIEM, EDR, or firewalls.
• Certifications: Foundational certifications such as CompTIA Security+, Network+, or similar vendor-specific credentials (e.g., Cisco CCNA, AWS/Azure certifications) are highly valued. Mid-Level/Complex:
• Education: o High School Diploma/GED with 8 years of relevant experience,
o Associates Degree with 6 years of relevant experience, o Bachelor's Degree with 4 years of relevant experience, o or Masters Degree with 2 years of relevant experience,
o or PhD with 0 years of relevant experience
• Technical Skills: Hands-on experience with configuration management tools, scripting or automation (e.g., Python, Bash, PowerShell), and cloud ecosystems (AWS, Azure).
• Compliance: Working knowledge of risk management frameworks (e.g., NIST, RMF, ISO 27001).
• Soft Skills: Strong technical writing, effective communication with non-technical stakeholders, and the ability to balance operational support with long-term architectural initiatives. Senior Level/Exceptionally Complex:
• Education: o High School Diploma/GED with 10 years of relevant experience,
o Associates Degree with 8 years of relevant experience, o Bachelor's Degree with 6 years of relevant experience, o or Masters Degree with 4 years of relevant experience,
o or PhD with 2 years of relevant experience
• Certifications: DoD 8570.01-M compliance (IAM/IASAE Level III) or a CISSP. SME Level/Exceptionally Complex:
• Education: o High School Diploma/GED with 12 years of relevant experience,
o Associates Degree with 10 years of relevant experience, o Bachelor's Degree with 8 years of relevant experience, o or Masters Degree with 6 years of relevant experience,
o or PhD with 4 years of relevant experience
• Certifications: Advanced DoD 8570/8140 baseline certifications (e.g., CISSP, CISM, CASP+ CE).
• Frameworks: Deep, practical command of regulatory frameworks like NIST SP 800-53, JSIG, CNSSI 1253, and NERC CIP.
• Technical Skills: Proficiency in COTS/GOTS security products, OS hardening (Linux/Windows), hypervisors/cloud deployment, and industrial protocols (if applied to OT/ICS). CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit-based performance, CGI typically does not hire individuals at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $

What CGI employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply