Remote Senior Control Validation Security Specialist

BMA; Virginia (IL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance options

Dental & Vision coverage

Disability insurance

401(k) with 6% match

Employee Stock Ownership Plan (ESOP)

Job summary

BMA is seeking a Control Validation Security Specialist – Senior to join our team supporting the AMPS program. This is a fully remote role, enabling work from anywhere in the United States.

The role requires deep experience auditing complex IT environments, with a focus on RMF, NIST SP 800-53, and eMASS, plus a Secret/Tier 3 clearance readiness. You will assess security controls and support security improvements across classified and unclassified networks.

Qualifications

• Three (3) years of experience with DoDI 8500.2 or NIST SP 800-53 and RMF.
• Two (2) years of experience with eMASS.
• Strong analytical and problem-solving skills.
• Proficiency with Excel and Access; Word and PowerPoint.
• Strong skills implementing and configuring networks.
• Experience weighing security concerns against business needs.
• IT-II Non-Critical Sensitive clearance or Tier 3 prior to onboarding.

Responsibilities

• Independently performs IT audits on complex information systems and enclaves.
• Ensures controls exist, are correctly implemented, and compliant with standards.
• Provides technical support in vulnerability assessment, risk assessment, and network security.
• Conducts cybersecurity control validation on classified and unclassified networks and systems.
• Weighs business needs against security concerns and evaluates mitigations.

Skills

RMF knowledge

DoDI 8500.2

NIST SP 800-53

eMASS

Network security

Analytical thinking

Excel

Access

Microsoft Office (Word/PowerPoint)

IT-II Non-Critical Sensitive or Tier 3

DLA experience

Job description

BMA is seeking a Control Validation Security Specialist – Senior to join our team supporting the AMPS program. This is a fully remote role, enabling work from anywhere in the United States.

The role requires deep experience auditing complex IT environments, with a focus on RMF, NIST SP 800-53, and eMASS, plus a Secret/Tier 3 clearance readiness. You will assess security controls and support security improvements across classified and unclassified networks.