1

Security Assessor Jobs in Silver Spring, MD (NOW HIRING)

Security Control Assessor, Mid

Washington, DC ยท On-site

$95K - $105K/yr

Description Quantum Sky is searching for a Security Control Assessor (SCA), Mid to support a federal customer in Washington, DC. The successful candidate will evaluate information systems to ensure ...

New

The successful candidate will perform independent assessments of security controls to ensure compliance with federal cybersecurity policies, standards, and frameworks, such as the Risk Management ...

Execute a security control assessment plan and update the System Security Plan * Review vulnerability scans and remediation * Implement risk management programs by utilizing NIST, FISMA, HIPAA, and ...

New

Execute a security control assessment plan and update the System Security Plan * Review vulnerability scans and remediation * Implement risk management programs by utilizing NIST, FISMA, HIPAA, and ...

New

Security Control Assessor

Alexandria, VA ยท On-site

$146K - $234K/yr

Execute a security control assessment plan and update the System Security Plan * Review vulnerability scans and remediation * Implement risk management programs by utilizing NIST, FISMA, HIPAA, and ...

New

Security Controls Assessor

Washington, DC ยท On-site

$160K - $180K/yr

SPA has an immediate need for a Security Controls Assessor (SCA). #FC #Dice Responsibilities The Security Controls Assessor (SCA) is responsible for conducting a comprehensive assessment of the ...

As a Security Control Assessor (Mid) supporting the F-35 Joint Program Office, you will provide security control assessment support to a Department of Defense customer responsible for one of the ...

Showing results 21-40

Security Assessor information

See Silver Spring, MD salary details

$9

$60

$80

How much do security assessor jobs pay per hour?

As of Aug 8, 2026, the average hourly pay for security assessor in Silver Spring, MD is $60.75, according to ZipRecruiter salary data. Most workers in this role earn between $52.16 and $70.34 per hour, depending on experience, location, and employer.

How do you become a security assessor?

To become a security assessor, candidates typically need a background in cybersecurity, information technology, or related fields, along with relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM). Gaining experience in security audits, risk assessment, and compliance standards is also important, and some roles may require security clearance or specific industry knowledge.

What are the key skills and qualifications needed to thrive as a security assessor?

To thrive as a Security Assessor, you need a thorough understanding of information security principles, risk assessment methodologies, and compliance frameworks, often supported by a degree in cybersecurity or related fields. Familiarity with tools such as vulnerability scanners, compliance management systems, and certifications like CISSP, CISA, or PCI QSA is typically required. Strong analytical thinking, attention to detail, and clear communication are vital soft skills for accurately identifying risks and conveying findings to stakeholders. These skills ensure that organizations remain compliant, secure, and resilient against evolving cyber threats.

What are some common challenges security assessors face when conducting security audits, and how can they overcome them?

Security Assessors often encounter challenges such as incomplete documentation, resistance from stakeholders, and rapidly changing technology environments. To overcome these, assessors should develop strong communication skills to build trust, encourage transparency, and ensure all relevant parties understand the importance of compliance. Staying current with industry standards and maintaining flexibility in their assessment approach also helps them adapt to new threats and technologies, ensuring thorough and effective audits.

What is a security assessor?

Security Assessors are professionals who evaluate the security measures, policies, and practices of an organization to identify vulnerabilities and ensure compliance with security standards and regulations. They conduct assessments such as penetration testing, risk analysis, and audits to help organizations safeguard their information systems against threats. Security Assessors often work with frameworks like PCI DSS, ISO 27001, and NIST to ensure best practices are followed. Their work is crucial for maintaining the confidentiality, integrity, and availability of sensitive data.

What is the difference between Security Assessor vs Security Analyst?

AspectSecurity AssessorSecurity Analyst
CertificationsISO 27001 Lead Auditor, CISSP, CISACISSP, Security+
Work EnvironmentAudit, compliance, risk assessmentMonitoring, incident response, threat analysis
Employer & IndustryConsulting firms, large organizations, governmentIT departments, security firms, corporations

Security Assessors primarily focus on evaluating security controls, conducting audits, and ensuring compliance with standards like ISO 27001. Security Analysts monitor security systems, analyze threats, and respond to incidents. While both roles require cybersecurity knowledge and certifications, Assessors emphasize compliance and auditing, whereas Analysts focus on threat detection and response.

What are popular job titles related to Security Assessor jobs in Silver Spring, MD? For Security Assessor jobs in Silver Spring, MD, the most frequently searched job titles are:
What job categories do people searching Security Assessor jobs in Silver Spring, MD look for? The top searched job categories for Security Assessor jobs in Silver Spring, MD are:
What cities near Silver Spring, MD are hiring for Security Assessor jobs? Cities near Silver Spring, MD with the most Security Assessor job openings:
Infographic showing various Security Assessor job openings in Silver Spring, MD as of August 2026, with employment types broken down into 79% Full Time, 19% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $126,365 per year, or $60.8 per hour.

Mid Level FPOC Security Assessor - USPTO x 3

Marathon TS

Alexandria, VA โ€ข On-site

Other

Re-posted 4 days ago


Job description

Security Specialist

We are looking to add a Security Specialist to support the United States Patent Trademark Office (USPTO). All candidates should have experience in the following areas:

  • Selection and coordination of NIST 800-53 Revision 4 security control application
  • Execution of activities required for NIST 800-37 R1 Risk Management Framework
  • Responsible for coordinating all Assessment and Authorization (A&A) or Certification and Accreditation (C&A) activities, and preparing all components of a Security Authorization Package
  • Application of NIST FIPS 199 to perform System Categorization
  • Application of excellent analytical reasoning skills to conduct security impact analyses and act as a Cybersecurity subject matter expert (SME) to System Owners and supporting technical personnel

Critical Knowledge:

  • Knowledge of FISMA, NIST 800-53 R4 Security Controls, NIST 800-37R1 Processes, FIPS 199 Categorization, and various NIST 800 series publications
  • Knowledge of various technical concepts and technologies including applications, platforms, operating systems, databases, and more
  • Familiarity with FedRAMP assessment, authorization and continuous monitoring processes

Critical Skills:

  • Web Services, Web Sphere, JBoss
  • UNIX
  • Windows, VMWare
  • SAN, NAS, or other Storage Technologies
  • Microsoft (AD, Exchange, SharePoint, and Cloud Services)
  • Oracle, MS SQL, MySQL
  • Excellent oral and written communication skills
  • Excellent technical writing skills

Education: (Required) Bachelor's Degree CAP Preferred (In addition to Required): CISSP (with CISSP, CAP becomes preferred, vs required) Master's Degree Organizational Considerations for a good fit: 4 Years of IT Security Experience (constructive credit allowed for degree(s) in cyber security Ability to work independently and as part of a team Motivation and desire to increase knowledge of and responsibility for system security Experience selecting, implementing and documenting NIST 800-53 R4 Security Controls to secure systems Experience updating system Security Authorization Packages Strong technical writing/security documentation experience Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status").


Marathon TS logo

About Marathon TS

Sourced by ZipRecruiter

Marathon TS provides a full range of professional services for clients that require support from professionals with specialized skills and experience in a specific technical area or subject matter. Marathon TS also provides IT solutions, including strategy, operations, transformation and mission support.

Industry

It services

Company size

51 - 200 Employees

Headquarters location

Sterling, VA, US

Year founded

2009

Social media