AI Security Controls Lead - Cloud & DevSecOps

SAIC; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

SAIC is seeking a Security Control Assessor/Representative (SCA/R) to lead security control assessments across high-priority DoD AI projects in Arlington, VA. You will evaluate security controls within AWS cloud, DevSecOps pipelines, and GenAI/LLM stacks, partnering with cybersecurity engineering and prototyping teams to weave security early in development.

Ideal candidates bring DoD RMF experience, certified IAM levels, and strong communication skills to convey risk to executives and technical

Qualifications

• US Citizens with TS clearance required.
• 14+ years of DoD/federal assessment experience.
• Current DoD 8570/8140 IAM Level II/III certs.
• Experience with RMF artifacts (SSPs, SAPs, SARs, POA&Ms).
• Strong communication to executives and engineers.
• Experience with eMASS/XACTA repositories.

Responsibilities

• Lead security control assessments for high-priority DoD AI projects.
• Develop reusable playbooks and assessment frameworks.
• Evaluate security controls across AWS, CI/CD, and GenAI stacks.
• Coordinate with AOs, PMs, and engineering leads.
• Prepare SSPs, SAPs, SARs, and POA&Ms tailored to rapid prototyping.
• Support risk briefings and ATO recommendations.

Skills

Security control assessments

NIST RMF / SP 800-53

AWS Cloud security

Written and verbal communication

DevSecOps collaboration

Education

Bachelor's degree or equivalent experience

Tools

eMASS / XACTA

Terraform / CloudFormation

Docker / EKS / ECS

AWS security services

Job description

SAIC is seeking a Security Control Assessor/Representative (SCA/R) to lead security control assessments across high-priority DoD AI projects in Arlington, VA. You will evaluate security controls within AWS cloud, DevSecOps pipelines, and GenAI/LLM stacks, partnering with cybersecurity engineering and prototyping teams to weave security early in development.

Ideal candidates bring DoD RMF experience, certified IAM levels, and strong communication skills to convey risk to executives and technical