AI Security Controls Lead – DoD Cloud & SCA/R

BuddoBot Inc.; Washington (District of Columbia); Hybrid; USD 135,000 - 150,000; Full time

Job summary

Dark Wolf Solutions seeks Security Control Assessor/Representatives to lead security control assessments across high-priority DoD AI projects. You will work at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, evaluating security controls for AI/LLM stacks across classification levels.

The role is based in Arlington, VA with hybrid/remote opportunities. You will review SSPs/SAPs/SARs, support ConMon and risk evaluations, and coordinate with AOs to

Qualifications

• Active Top Secret security clearance.
• DoD 8570/8140 IAM Level II or III certification.
• 3–5+ years in security control assessments for DoD or federal systems.
• Solid AWS cloud services knowledge and how controls operate in CI/CD.
• Strong RMF artifact experience (SSPs, SAPs, SARs, POA&Ms).
• Excellent written and verbal communication.
• Experience with eMASS or XACTA.

Responsibilities

• Execute formal SCA/R duties and lead assessment efforts.
• Develop reusable security playbooks and assessment frameworks.
• Evaluate controls across AWS, DevSecOps pipelines, and container stacks.
• Collaborate with engineering to integrate security early.
• Maintain SSPs, SAPs, SARs, and POA&Ms for rapid prototyping.
• Provide risk briefings and ATO recommendations to AOs.

Skills

Written communication

Security risk assessment

RMF knowledge

Cloud security

Education

DoD 8570/8140 IAM Level II/III certification

Tools

AWS

eMASS

XACTA

Terraform

CloudFormation

Job description

Dark Wolf Solutions seeks Security Control Assessor/Representatives to lead security control assessments across high-priority DoD AI projects. You will work at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, evaluating security controls for AI/LLM stacks across classification levels.

The role is based in Arlington, VA with hybrid/remote opportunities. You will review SSPs/SAPs/SARs, support ConMon and risk evaluations, and coordinate with AOs to