6,761 security controls jobs at 1,869 companies in United States

2mo
Save
Mark Applied
Hide
Senior Security Controls Engineer
Boise, Idaho, United States
OnsiteFull Time
American Credit Acceptance
American Credit Acceptance: Provides automobile financing and loan servicing for emerging credit consumers.
7+ YOE7+ years in security engineering with emphasis on security controls and hardening; strong Windows/Linux hardening, cloud security in Azure/AWS, and automation.
PowerShell, Python, Terraform, CI/CD
1mo
Save
Mark Applied
Hide
Security Controls Assessor
Bluemont or McLean or United States or India
$110k-$125k/yr HybridFull Time
UltraViolet Cyber
UltraViolet Cyber: Provider of unified offensive and defensive managed cybersecurity services.
5+ YOEUS citizen with Bachelor's in cybersecurity/CS/IS, 5+ years cybersecurity/audit/compliance experience with RMF and NIST 800-series, relevant certs (CISSP/CISA/CAP), and ability to lead security control assessments and produce SARs/POA&Ms.
Risk Management Framework (RMF), FISMA, NIST SP 800-53, NIST SP 800-53A
2mo
Save
Mark Applied
Hide
Senior Security Controls Engineer
Boise, Idaho, United States
OnsiteFull Time
American Credit Acceptance
American Credit Acceptance: Provider of auto financing solutions for consumers.
7+ YOE7+ years in security/infrastructure engineering with focus on security controls and hardening; CIS benchmarks; Windows/Linux hardening; cloud security (Azure/AWS); scripting/automation.
PowerShell, Python, Terraform, CI/CD, Windows, Linux, Azure, AWS, EDR, SIEM
5d
Save
Mark Applied
Hide
Senior Security Controls Assessor
Virginia, United States
RemoteFull Time
ECS
ECSNYSE: ASGN: Provides advanced technology and engineering services to government agencies.
7+ YOEPublic Trust clearance (or ability to obtain), U.S. citizenship, bachelor\u0002s degree or equivalent, CISSP/CISM/CISA preferred, 7+ years assessing security controls in federal environments, strong communication skills.
2w
Save
Mark Applied
Hide
Security Controls Assessor (SCA) - Journeyman
United States or North America
$104k-$119k/yr RemoteFull Time
Avint
Avint: Delivers cybersecurity engineering and compliance for federal agencies.
6+ YOEU.S. citizen with 6+ years cybersecurity/assurance/IT-audit experience, hands-on security control assessment experience, Security+ or higher, bachelor’s degree or equivalent, strong communication and documentation skills.
Nessus, Qualys, AWS, Azure, Google Cloud, NIST SP 800-37, NIST SP 800-53, NIST SP 800-171, FedRAMP
1mo
Save
Mark Applied
Hide
Security Controls Assurance Lead
San Francisco or New York City or Washington
$345k/yr HybridFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
Define control requirements for AI systems, assess implementations against SOC2/ISO/HIPAA and other frameworks, partner with engineering, and validate evidence; requires engineering fluency and audit/control program experience.
Terraform, CI/CD, Python, Go, Rust, C, C++, Claude, LLMs
6d
Save
Mark Applied
Hide
Manager, Security Risk Controls
Morrisville, North Carolina, United States
$130k-$150k/yr RemoteFull Time
Lenovo
LenovoHKSE: 992: Manufactures personal computers, mobile devices, and server infrastructure.
7+ YOE7+ years in cybersecurity/governance with experience managing security controls, supporting audits, and driving remediation; bachelor\u0002s degree; strong stakeholder influence and program management skills.
ISO 27001, NIST CSF, NIST 800-53
2w
Save
Mark Applied
Hide
Senior Security Controls Assessor - Contingent
United States or McLean
RemoteFull Time
Aretum
Aretum: Provides technology-enabled mission support services for federal government agencies.
3+ YOE3+ years leading security controls assessments for federal clients, proficiency with NIST RMF and NIST 800-53 Rev 5, understanding of ATO process, strong communication and task management; CISSP/CISM/CISA preferred.
NIST RMF, NIST 800-53 Rev 5
2w
Save
Mark Applied
Hide
Security Controls Engineer
Irving, Texas, United States
$100k-$150k/yr OnsiteFull Time
Tata Consultancy Services
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
4+ YOE3-5+ years DevSecOps/cloud engineering experience; strong Python and software engineering skills; experience with AWS/GCP/Azure, OPA/Rego, Terraform, CI/CD, automated testing, and detection engineering.
Python, Terraform, OPA, Rego, AWS, GCP, Azure, API, CI/CD, Splunk SPL, YARA, Karat Assessment
2w
Save
Mark Applied
Hide
Security Controls Assessor
Dayton, Ohio, United States
$180k-$220k/yr OnsiteFull Time
Modern Technology Solutions, Inc.
Modern Technology Solutions, Inc.: Provides engineering, technology, and cybersecurity services for national security.
15+ YOETS/SCI and CI polygraph required; 15+ years experience; Bachelor's in CS/CE or related; RMF/JSIG assessment experience; prior ISSO/ISSM and SAP/SCI exposure; ability to produce SARs and POA&Ms.
Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG), Plan of Action and Milestones (POA&M)
2w
Save
Mark Applied
Hide
Security Controls Assessor
Dayton, Ohio, United States
$180k-$220k/yr OnsiteFull Time
Modern Technology Solutions
Modern Technology Solutions: A technology and defense contractor providing cybersecurity assessment and solutions for government customers.
15+ YOE15+ years cybersecurity experience, RMF/JSIG assessment expertise, prior ISSO/ISSM performance, active TS/SCI with DoD SAP access and CI polygraph, bachelor\u0002s in CS/CE or related.
Risk Management Framework (RMF), Joint Special Access Program (JSIG), Plan of Action and Milestones (POA&M), Security Assessment Report (SAR)
2w
Save
Mark Applied
Hide
Cloud Security Controls Engineer
Dallas, Texas, United States
$100k-$125k/yr HybridFull Time
Deloitte
Deloitte: Provides professional audit, consulting, advisory, and tax services.
3+ YOE3+ years DevSecOps/cloud security experience across AWS/GCP/Azure, proficiency with Python and Terraform, OPA and detection engineering experience, SIEM/Splunk familiarity, bachelor's degree preferred.
AWS, GCP, Azure, Open Policy Agent (OPA), Python, Terraform, Splunk SPL, YARA
3w
Save
Mark Applied
Hide
Sr. Security Controls & Compliance Engineer (Contract)
United States
RemoteContract
UP.Labs
UP.Labs: Builds and scales mobility-focused startups with corporate partners.
7+ YOE7+ years in security engineering/DevSecOps with hands-on control implementation, SOC 2 readiness experience, compliance automation platform operation, identity/cloud/SDLC controls implementation, and familiarity with GitHub, Okta, Google Workspace, Slack, and major cloud providers.
Vanta, Drata, Secureframe, GitHub, Jira, Linear, Okta, Google Workspace, Slack, AWS, Azure, GCP, CI/CD
2mo
Save
Mark Applied
Hide
Director, National Security-Trade Controls
Dallas, Texas, United States
$130k-$175k/yr OnsiteFull Time
Alvarez & Marsal
Alvarez & Marsal: Provides management consulting, restructuring, and business advisory services.
Bachelor's degree required; advanced degree strongly preferred; experience in international trade controls and national security; strong research and writing; proficient with MS Office tools.
MS Teams, Word, Excel, PowerPoint, Project, SharePoint
2mo
Save
Mark Applied
Hide
Security Engineer - Cloud Security Controls
Strongsville or Denver or Phoenix or Cleveland or Birmingham or Dallas
$80k-$185k/yr HybridFull Time
PNC Financial Services
PNC Financial ServicesNYSE: PNC: Provides banking, lending, and investment services to customers.
5+ YOECloud security controls in AWS/Azure, CSPM, CI/CD, scripting, and strong communication.
AWS, Azure, CSPM, CI/CD, Python, PowerShell, Bash, Git
1mo
Save
Mark Applied
Hide
Security Controls Assessor (Part time & Remote)
Sterling or United States
$50-$95/hr RemotePart Time, Contract
TestPros
TestPros: Provides independent IT assessment and cybersecurity compliance services.
5+ YOEMinimum 5 years IT security compliance experience with NIST 800-53 Rev 5, RMF/FISMA knowledge, cloud security, risk analysis, vulnerability management, incident handling, and penetration testing tools; Bachelor's degree preferred.
NIST 800-53 Rev 5, RMF, FISMA, nmap, Metasploit, Advanced Malware Protection
3w
Save
Mark Applied
Hide
AWS Security Controls Specialist, AWS Compliance & Security Assurance
Seattle or Arlington or New York or Herndon
$102k-$196k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
3+ YOEBachelor's degree in a related field, 3+ years security-related experience, 3+ years creating process improvements with automation, IT audit experience, strong communication and stakeholder engagement skills.
1mo
Save
Mark Applied
Hide
Cloud Security Controls Engineering - VP
Alpharetta, Georgia, United States
OnsiteFull Time
Morgan Stanley
Morgan StanleyNYSE: MS: Global financial services firm providing investment and wealth management.
7+ YOE7+ years cloud security engineering experience with IaC and CI/CD; expertise in OPA (Rego), Regula, Terraform, and cloud platforms (AWS/Azure/GCP); experience leading engineers and translating requirements into policy-as-code controls.
OPA (Rego), Regula, Terraform, CI/CD, AWS, Azure, GCP, CSPM
3mo
Save
Mark Applied
Hide
Security Controls Assessor (Pipeline)
Belleville, Illinois, United States
OnsiteFull Time
Electrosoft Services
Electrosoft Services: Federal cybersecurity, digital engineering, and IT solutions provider
5+ YOEActive DoD Secret clearance, IAM-III certs, 5+ years RMF/IA experience, BA/BS degree.
eMASS
2w
Save
Mark Applied
Hide
Enterprise Cybersecurity GRC Security Controls Assessor
McLean, Virginia, United States
$78k-$176k/yr HybridFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
8+ YOEU.S. citizenship, 8+ years in cybersecurity roles assessing controls and compliance (NIST, FedRAMP, CMMC), experience with automation/AI and IAC, HS diploma or GED.
NIST SP 800-171, NIST SP 800-53, FedRAMP, CMMC, Risk Management Framework (RMF), DevSecOps, Infrastructure-as-Code (IAC), AI