Lead Cloud Security Assessor, FedRAMP Expert

Method, Inc.; Washington; On-site; USD 140,000 - 190,000; Full time

Job summary

Spry Methods seeks a Senior Cloud Security Assessor to lead independent security assessments of cloud and hybrid systems supporting federal missions in the Washington, DC area.

The role requires hands-on experience with SA&A, FedRAMP packages, RMF processes, and strong technical writing to communicate findings to technical teams and executives. Expect rigorous analysis, evidence-driven conclusions, and practical risk mitigation guidance.

Qualifications

• Active CISSP certification required.
• Eight+ years conducting security control assessments.
• Experience assessing FedRAMP/federal cloud environments.
• Knowledge of RMF and NIST security control practices.
• Ability to analyze large volumes of evidence and draw conclusions.
• Excellent writing and stakeholder communication.

Responsibilities

• Lead full-cycle SA&A activities for cloud, hybrid, and enterprise systems as an independent assessor.
• Assess Azure and AWS environments, including controls effectiveness.
• Review FedRAMP packages and analyze applicability, gaps, and responsibilities.
• Analyze artifacts like SSPs, policies, architecture diagrams, and logs.
• Develop SAPs, SARs, RARs, Evidence Lists, and POA&Ms.
• Perform security testing from admin, operational, and technical perspectives.
• Interpret vulnerability findings, distinguish true risks from false positives.
• Apply requirements with practical judgment using data context.
• Communicate findings and mitigation options to teams and executives.
• Coordinate evidence requests and assessment schedules with customers.
• Support program operations and quality reviews for defensible reporting.

Skills

Analytical skills

Technical writing

Stakeholder communication

Independent assessor experience

Security assessments

Education

CISSP certification

Bachelor's degree in cybersecurity / related field

Eight years of relevant experience

Tools

CSAM or governance platform

Job description

Spry Methods seeks a Senior Cloud Security Assessor to lead independent security assessments of cloud and hybrid systems supporting federal missions in the Washington, DC area.

The role requires hands-on experience with SA&A, FedRAMP packages, RMF processes, and strong technical writing to communicate findings to technical teams and executives. Expect rigorous analysis, evidence-driven conclusions, and practical risk mitigation guidance.