Security Assessor

Tangent Technologies is seeking an experienced Security Assessor to support a federal client. The Security Assessor will conduct comprehensive cybersecurity assessments of federal information systems to evaluate compliance with applicable security requirements, identify risks, and recommend actions that strengthen the organization’s cybersecurity posture. This position is 100% remote and candidates must be able to obtain and maintain a Public Trust determination, including successfully completing the required federal background investigation. This position must be filled immediately.

Tangent Technologies is actively seeking military veterans to join our team. We value the leadership, dedication, and technical expertise veterans bring and strongly encourage qualified veterans to apply.

The ideal candidate has demonstrated experience performing Security Assessment and Authorization (A&A) activities, applying the NIST Risk Management Framework (RMF), and evaluating technical, operational, and management security controls in accordance with federal cybersecurity standards, including FedRAMP requirements. This role works closely with ISSOs, System Owners, Authorizing Officials, engineers, administrators, and technical teams to help ensure systems meet federal security and compliance requirements.

Key Responsibilities

• Perform in-depth assessments and testing of management, operational, and technical security controls across systems, networks, and software applications against NIST RMF and FedRAMP standards.
• Assess the security of cloud-based systems, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) deployments.
• Apply knowledge of IT concepts, applications, communications systems, hardware, software, and information processing systems to evaluate security performance and integrity.
• Conduct vulnerability and configuration assessments using automated tools and manual techniques.
• Evaluate secure software development lifecycle (SDLC) and DevSecOps practices, as applicable.
• Apply knowledge of modern cybersecurity practices, including cloud security, Zero Trust, and emerging technologies such as AI and machine learning.
• Identify security weaknesses, document findings, assess risk severity, and recommend remediation actions.
• Support Authorization to Operate (ATO), annual assessment, continuous monitoring, and reauthorization activities.
• Collaborate with engineers, ISSOs, administrators, and government stakeholders to validate security requirements and resolve assessment findings.
• Review system security artifacts and prepare detailed documentation, including Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Stay current on cybersecurity threats, federal guidance, and evolving compliance requirements.

Required Qualifications

• Bachelor’s degree from an accredited college or university.
• Minimum of seven years of experience supporting cybersecurity, information assurance, or Security Assessment and Authorization (A&A) activities.
• Experience applying the NIST Risk Management Framework (RMF).
• Knowledge of NIST SP 800-53, NIST SP 800-37, FISMA, FedRAMP, and other federal cybersecurity requirements.
• Experience reviewing security documentation and evaluating security controls.
• Strong analytical, communication, stakeholder engagement, and technical writing skills.

Preferred Qualifications

• Active cybersecurity certification such as CISSP, CISM, CISA, CASP+, or an equivalent credential.
• Experience supporting federal cybersecurity contracts.
• Experience with vulnerability scanning tools, cloud security, continuous monitoring, and assessment automation.
• CISA AES Assessment Lead (AL) or Technical Lead (TL) certification desired, but not required.

Why Join Tangent Technologies

Tangent Technologies is a Service-Disabled Veteran-Owned Small Business dedicated to protecting federal missions through innovative cybersecurity solutions. We offer competitive compensation, professional development opportunities, certification support, remote work options, and a collaborative environment where experienced professionals mentor the next generation of cybersecurity talent. Veterans are strongly encouraged to apply.