Remote Senior RMF/NIST Security Control Assessor

Blu Omega Inc.; Arlington (VA); On-site; USD 120,000 - 137,000; Full time

Benefits offered by this job

Medical, Dental, and Vision coverage

401(k) with company match

Life and AD&D insurance

Short-term and long-term disability

Employee Assistance Program (EAP)

Telehealth and virtual care

Pet insurance, legal services, and IDT

Paid Time Off and federal holidays

Wellness programs and discounts

Job summary

Blu Omega Inc. is seeking a Senior Security Control Assessor to conduct RMF-based security/privacy assessments for federal programs. This role focuses on evaluating controls, supporting ATO processes, and ensuring alignment with NIST standards.

You will review SSPs and POA&Ms, document findings, and collaborate with system owners and engineering teams. Public Trust eligibility is required; 7+ years in cybersecurity and a Master’s degree are preferred.

Qualifications

• 7+ years of cybersecurity experience conducting assessments.
• Extensive experience in A&A, RMF, and control assessments.
• Ability to obtain and maintain Public Trust clearance.
• Strong knowledge of NIST SP 800-53/800-37 and security control validation/testing.
• Experience with vulnerability scanning tools such as Nessus and Qualys.
• Understanding of secure network and system architectures.
• Excellent documentation and communication skills for interaction with leadership.

Responsibilities

• Conduct independent security control assessments (NIST SP 800-37/800-53).
• Evaluate technical, operational, and management controls for effectiveness.
• Support system authorizations (ATO), including reviewing SSPs and POA&Ms.
• Identify and document risks and compliance gaps; provide mitigation strategies.
• Analyze impacts of system or network changes on security posture.
• Participate in governance and risk review boards; advise on security implications.
• Verify proper implementation of security controls with owners and engineering.
• Support vulnerability assessments, audits, and configuration reviews.
• Contribute to RMF documentation lifecycle: CONOPS, security plans, test plans, risk assessments.

Skills

7+ years of cybersecurity experience

A&A & RMF

Public Trust clearance

NIST SP 800-53/800-37 knowledge

Security control validation

Vulnerability scanning tools

Secure network architecture

Documentation & communication

Education

Master’s degree in a related field

Tools

Nessus

Qualys

Job description

Blu Omega Inc. is seeking a Senior Security Control Assessor to conduct RMF-based security/privacy assessments for federal programs. This role focuses on evaluating controls, supporting ATO processes, and ensuring alignment with NIST standards.

You will review SSPs and POA&Ms, document findings, and collaborate with system owners and engineering teams. Public Trust eligibility is required; 7+ years in cybersecurity and a Master’s degree are preferred.