ZipRecruiter

Log In

1

Security Risk Assessment Jobs in Washington, DC (NOW HIRING)

ResolveSoft Inc

Security Oversight Product Owner

Washington, DC · Remote

$120K - $130K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

This role ensures comprehensive security operations, continuous compliance management, proactive risk assessment, incident response, and security documentation support across high-profile, public ...

previous pagenext page

Showing results 21-40

All JobsSecurity Risk Assessment JobsSecurity Risk Assessment Jobs in Washington, DC

Security Risk Assessment information

See Washington, DC salary details

$11

$57

$79

How much do security risk assessment jobs pay per hour?

As of Aug 14, 2026, the average hourly pay for security risk assessment in Washington, DC is $57.09, according to ZipRecruiter salary data. Most workers in this role earn between $46.30 and $68.08 per hour, depending on experience, location, and employer.

What is a security risk assessment?

A Security Risk Assessment job involves identifying, analyzing, and mitigating potential security threats to an organization's systems, data, and operations. Professionals in this role evaluate vulnerabilities, assess risks, and recommend security controls to protect against cyber threats, fraud, and compliance issues. They work with IT teams, management, and stakeholders to ensure security measures align with business objectives and regulatory requirements. This job often requires knowledge of cybersecurity frameworks, risk management methodologies, and relevant industry standards.

What are the key skills and qualifications needed for security risk assessment?

To thrive in Security Risk Assessment, a strong background in risk analysis, information security principles, and regulatory compliance is essential, often supported by a degree in cybersecurity or related fields. Familiarity with risk assessment tools, frameworks like NIST or ISO 27001, and certifications such as CISSP or CISA are highly valued. Exceptional attention to detail, analytical thinking, and effective communication skills set top professionals apart in this role. These competencies enable accurate identification of potential security threats and development of strategic mitigation plans, which are crucial for safeguarding organizational assets.

What are some common challenges faced in a security risk assessment role?

Professionals in Security Risk Assessment often face the challenge of keeping up with constantly evolving cyber threats and adapting assessment methodologies accordingly. Balancing thorough analysis with the need to provide timely recommendations can be demanding, especially when collaborating with multiple departments or stakeholders. Additionally, communicating complex risk findings to non-technical audiences requires both clarity and diplomacy. Overcoming these challenges is critical for delivering actionable insights that drive effective security decision-making and protect organizational assets.

What are the most commonly searched types of Security Risk Assessment jobs in Washington, DC?

The most popular types of Security Risk Assessment jobs in Washington, DC are:

What are popular job titles related to Security Risk Assessment jobs in Washington, DC?

For Security Risk Assessment jobs in Washington, DC, the most frequently searched job titles are:

What job categories do people searching Security Risk Assessment jobs in Washington, DC look for?

The top searched job categories for Security Risk Assessment jobs in Washington, DC are:

Security Risk Assessment jobs near you
Infographic showing various Security Risk Assessment job openings in Washington, DC as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $118,750 per year, or $57.1 per hour.

Senior Security Risk Management SME

Jimmy Jazz

Washington, DC • On-site

$150 - $210/hr

Other

Posted 8 days ago

Job description

Employee Type: Regular Full-Time

Contact Information
  • Name: Talent Acquisition
  • Email: recruiting@tharros.com
Description

Tharros is seeking a Senior Security Risk Management SME to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region. This role will support enterprise cybersecurity risk management, Assessment and Authorization, continuous monitoring, FISMA compliance, secure cloud and hybrid engineering, and risk-based decision support across a complex mission environment. The ideal candidate can help translate security data, authorization evidence, vulnerabilities, POA&M status, and compliance requirements into clear risk insights and actionable remediation priorities.

Responsibilities
  • Support enterprise cybersecurity risk management across classified and unclassified mission environments.
  • Lead or support Assessment and Authorization activities for Federal information systems.
  • Support security control assessments aligned to NIST, CNSSI, Intelligence Community, and Federal cybersecurity requirements.
  • Review and validate security artifacts, including System Security Plans, Security Assessment Plans, Security Assessment Reports, POA&Ms, and authorization evidence.
  • Support POA&M development, validation, remediation tracking, closure, and reporting.
  • Collaborate with system owners, ISSOs, developers, engineers, assessors, and other stakeholders to address findings and strengthen security posture.
  • Provide risk mitigation recommendations for assigned systems, networks, applications, and environments.
  • Support continuous monitoring activities that maintain system security posture over time.
  • Help improve and automate A&A, continuous monitoring, evidence management, and risk reporting processes.
  • Support quality reviews and process improvements for authorization documentation and security control implementation.
  • Translate complex security, compliance, and technical data into leadership-ready risk insights, dashboards, briefings, and remediation recommendations.
  • Support risk management activities across cloud, hybrid, cross-domain, and secure mission environments.
Requirements
  • Active TS/SCI with Poly
  • 10+ years of related cybersecurity risk management experience.
  • At least 2 years of recent experience in each of the following areas: A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering.
  • Experience with emerging and evolving security risk management practices, including automation of A&A and continuous monitoring activities.
  • Experience applying NIST 800 series, CNSSI 1253, security controls, and RMF principles.
  • CISM, CAP, or GRC certification, or comparable demonstrable experience.
  • Experience developing, reviewing, or supporting authorization artifacts such as SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation evidence, and continuous monitoring reports.
  • Strong written and verbal communication skills, including the ability to explain risk, compliance status, and remediation needs clearly.
  • Ability to work onsite at a Government-approved location as required.
Preferred Qualifications
  • Prior DHS, Intelligence Community, DoD, CISO office, ISSM, AO, SCA, or national security cybersecurity risk management experience.
  • Experience with enterprise RMF/A&A portfolios, ConMon automation, ATO/ATC readiness, POA&M quality, risk dashboards, GRC workflows, and evidence automation.
  • Experience with AWS, Microsoft Azure, Microsoft 365, or other cloud platforms.
  • Experience supporting classified, hybrid cloud, cross-domain, TS/SCI, or secure mission environments.
  • Experience turning vulnerability, threat, audit, compliance, system criticality, and continuous monitoring data into decision-ready risk insights.

Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.

#J-18808-Ljbffr

Apply