1

Security Controls Assessor Jobs in Seattle, WA (NOW HIRING)

You will operate and maintain the security tools and controls that protect our infrastructure ... Support the risk assessment process by identifying, documenting, tracking, and helping remediate ...

You will operate and maintain the security tools and controls that protect our infrastructure ... Support the risk assessment process by identifying, documenting, tracking, and helping remediate ...

Information Security Engineer

Seattle, WA ยท On-site

$140 - $160/hr

... controls and tooling across our Microsoft 365/Azure environment and supporting onโ€‘prem systems ... Perform security assessments and vulnerability management, including scanning, prioritization ...

Information Security Systems Engineer

Kent, WA ยท On-site

$133K - $200K/yr

Conduct regular security audits and vulnerability assessments to identify and mitigate potential risks * Collaborate with cross-functional teams to integrate security controls into business processes ...

Very good understanding of security controls, control systems, and business drivers that impact ... Assessment Systems Secure transfer protocols such as SSH, SCP and Connect Direct Secure Plus ...

... controls that provide continuous assurance rather than point-in-time assessments - Collaborate with security stakeholders to define and drive the long-term security strategy and participate in ...

next page

Showing results 1-20

Security Controls Assessor information

See Seattle, WA salary details

$10

$66

$88

How much do security controls assessor jobs pay per hour?

As of Aug 22, 2026, the average hourly pay for security controls assessor in Seattle, WA is $66.88, according to ZipRecruiter salary data. Most workers in this role earn between $57.45 and $77.40 per hour, depending on experience, location, and employer.

What is a security controls assessor?

Security Controls Assessors are professionals responsible for evaluating and validating the effectiveness of security controls within an organization's information systems. They conduct assessments to ensure compliance with regulatory standards, such as NIST, FISMA, or other security frameworks. Their work helps organizations identify vulnerabilities, manage risks, and maintain the confidentiality, integrity, and availability of critical data. Security Controls Assessors often provide recommendations for remediation and support efforts to achieve or maintain security certifications.

What does a security controls assessor do?

A security controls assessor (SCA) evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems, working either alone or as part of a team. As a security controls assessor, your duties begin with conducting an in-depth assessment of the management, operations, and technical security controls. You must analyze information and prepare reports describing the vulnerability level of the network with specific detail as to what compromises data systems. You then develop a plan to address vulnerabilities and continue to monitor the security of network systems.

What are the key skills and qualifications needed to thrive as a security controls assessor, and why are they important?

To thrive as a Security Controls Assessor, you need expertise in information security frameworks, risk assessment methodologies, and compliance requirements, often supported by a degree in cybersecurity or related fields and certifications like CISSP, CISA, or CAP. Familiarity with tools such as vulnerability scanners, security assessment platforms, and compliance management systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and clearly report findings to stakeholders. These skills ensure that organizations maintain robust security postures and meet regulatory requirements to protect critical assets.

What are some common challenges security controls assessors face when evaluating compliance across multiple systems?

Security Controls Assessors often encounter challenges with inconsistent documentation, varying system configurations, and differing interpretations of compliance standards across departments. Coordinating with multiple teams to collect evidence and clarify control implementations can be time-consuming, especially in large organizations. Staying current with evolving regulations and ensuring all systems meet the latest requirements also demands continuous learning and adaptability. Building strong communication channels with system owners and IT staff helps overcome these hurdles and ensures thorough, accurate assessments.

What is the difference between Security Controls Assessor vs Security Analyst?

AspectSecurity Controls AssessorSecurity Analyst
CertificationsISO 27001 Lead Auditor, CISSP, CISACISSP, Security+
Work EnvironmentAssessing security controls, compliance auditsMonitoring security systems, incident response
Employer & IndustryGovernment agencies, compliance firmsCorporate IT, cybersecurity teams

The Security Controls Assessor primarily evaluates and verifies security controls for compliance, often in government or regulated environments. In contrast, a Security Analyst focuses on monitoring, analyzing, and responding to security threats within organizations. While both roles require security certifications and involve cybersecurity, their core responsibilities and work settings differ significantly.

What are popular job titles related to Security Controls Assessor jobs in Seattle, WA?

For Security Controls Assessor jobs in Seattle, WA, the most frequently searched job titles are:

What job categories do people searching Security Controls Assessor jobs in Seattle, WA look for?

The top searched job categories for Security Controls Assessor jobs in Seattle, WA are:

Infographic showing various Security Controls Assessor job openings in Seattle, WA as of August 2026, with employment types broken down into 85% Full Time, 12% Part Time, and 3% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $139,108 per year, or $66.9 per hour.

Security Administrator

Stoke Space

Kent, WA โ€ข On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 11 days ago


Job description

Description

Reusable launch systems are the key to seamlessly connecting Earth and space. As a Security Administrator, you will administer, maintain, document, and continuously improve the technical security controls that protect Stoke's infrastructure, engineering environments, manufacturing systems, and sensitive aerospace data.

We are a small, highly motivated team. You will work across IT, software engineering, manufacturing, and operations to administer scalable security controls that enable teams to move quickly without compromising Stoke's security posture.

This is a hands-on security administration role supporting Stoke's evolving information security program. You will operate and maintain the security tools and controls that protect our infrastructure, engineering systems, and manufacturing environments while supporting risk management, compliance, and audit-readiness efforts. You will help translate regulatory requirements, including NIST 800-53/171, FedRAMP, ISO 27001, and SOC frameworks, into practical security configurations, repeatable processes, and well-maintained documentation.

You must be ready to stay focused, move fast, self-direct, and learn on the fly.

Responsibilities

  • Administer and maintain security tools and systems across cloud and on-premise environments, including identity, endpoint, network, vulnerability management, and security logging platforms
  • Monitor and analyze security alerts, investigate suspicious activity, and support the response to potential security incidents
  • Implement and maintain security configurations, policies, standards, and procedures in alignment with regulatory and industry frameworks, including NIST 800-53/171, SOC 1/SOC 2, and ISO 27001
  • Support the risk assessment process by identifying, documenting, tracking, and helping remediate information security risks
  • Perform vulnerability scanning, review findings, coordinate remediation activities, and verify that identified issues are resolved
  • Conduct regular reviews of user access, system configurations, security logs, and technical controls
  • Collaborate with cross-functional teams to integrate and maintain security controls within business processes, IT systems, and engineering environments
  • Maintain documentation, system records, procedures, and evidence required to support audits and compliance activities
  • Support security-related onboarding and offboarding activities, including account provisioning, access changes, and access removal
  • Perform hands-on system administration tasks, particularly those involving secure configurations, identity and access management, endpoint protection, and logging
  • Assist with security awareness activities and provide guidance to users on security policies and procedures
  • Perform additional duties as assigned to support organizational goals and objectives

Qualifications

  • Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
  • Strong understanding of IT infrastructure, including applications, networks, servers, storage, endpoints, identity systems, logging architectures, and cloud technologies
  • Experience administering enterprise security tools and implementing technical security controls
  • Experience reviewing security alerts, logs, and system activity to identify, investigate, and resolve security issues
  • Strong analytical and troubleshooting skills, with the ability to correlate information across multiple systems and determine appropriate remediation actions
  • Ability to prioritize security findings based on risk, impact, exploitability, and operational context
  • 3+ years of experience in information security, systems administration, security operations, or a related technical field
  • Working knowledge of relevant security and compliance frameworks, such as NIST 800-53/171, SOC 2, and ISO 27001
  • Ability to create and maintain clear technical documentation, investigation records, procedures, remediation plans, and audit evidence
  • Ability to work independently, follow issues through resolution, and coordinate effectively with technical and nontechnical stakeholders

Preferred Qualifications

  • Experience administering security platforms such as SIEM, endpoint detection and response, vulnerability management, identity and access management, mobile device management, or data loss prevention tools
  • Hands-on experience reviewing and correlating logs from endpoints, identity providers, cloud platforms, firewalls, applications, servers, and network security systems
  • Experience creating and tuning SIEM queries, dashboards, correlation rules, alerting logic, and automated response workflows
  • Experience investigating security alerts, documenting findings, coordinating remediation, and verifying corrective actions
  • Experience operating in regulated environments subject to NIST 800-171, NIST 800-53, FedRAMP, ISO 27001, SOC 2, CUI handling, or similar control frameworks
  • Experience with Microsoft security and administration platforms, including Entra ID, Microsoft 365, Intune, Defender, or Microsoft Sentinel
  • Experience supporting vulnerability remediation, access reviews, incident response, security monitoring, log management, and audit evidence collection
  • Familiarity with scripting or automation using PowerShell, Python, Bash, KQL, or similar tools
  • Experience identifying monitoring gaps and onboarding systems, applications, or security data sources into a centralized logging or SIEM platform
  • Experience in environments subject to strict data-protection or government-driven security requirements
  • Prior experience working in a startup environment, demonstrating adaptability, resourcefulness, and a hands-on approach to security administration

Benefits

  • Equity - We know that our employees are the reason we succeed. To give everyone a stake in our future, we are pleased to offer equity in the form of stock options to all regular, full-time employees.ย 
  • Comprehensive benefits program including subsidized medical, dental, and vision insuranceย 
  • Company-paid life and disability insuranceย 
  • 401(k) plan with employer matchย 
  • 4 weeks' Paid Time Off ย 
  • Holidays - 10 days (including an end-of-year closure)ย 
  • Paid Family/Parental Leave ย 
  • On-site gym or monthly wellness stipend (depending on location)ย 
  • Dog friendly offices!ย 

Compensation

Target Levels:

  • Level 1 Range: $89,040 - $133,560
  • Level 2 Range: $111,300 - $166,950

Our job posts are intentionally written to attract a wide variety of experience levels, and we make decisions about the right fit on a per-candidate basis.ย 

Your actual level and base salary will be decided based on your specific experience and skill level.