RMF Security Control Assessor - Onsite VA

Apex Systems; Alexandria (VA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

401K program

HSA

ESPP (Employee Stock Purchase Program)

Career development offerings

Job summary

Everforth Apex is seeking a Security Control Assessor in Alexandria, VA to evaluate, test, and validate security controls within information systems, with RMF emphasis. You will develop A&A artifacts, SARs, SSPs, and POA&Ms, and guide remediation actions through authorization.

You will perform risk-based assessments, vulnerability analysis, and collaborative security activities with ISSOs and system owners to ensure compliant, secure operations.

Qualifications

• BA/BS degree or equivalent years of relevant experience.
• Must be eligible to obtain and maintain a DoD Secret Clearance.
• 5+ years of experience in a Security Control Assessor role.
• DoD 8570 IAT II certification or equivalent.
• Experience with RMF, A&A documentation, and vulnerability analysis.
• Experience with cloud-based controls and RMF assessments.

Responsibilities

• Provide tailored documentation to support security authorization processes.
• Plan and execute security control assessments for information systems.
• Analyze and evaluate the effectiveness of security controls to identify risks.
• Prepare Security Assessment Reports and advise on SSPs and POA&Ms.
• Perform access controls, interpret findings, and push systems through authorization.
• Conduct vulnerability scanning and RMF-based compliance operations.
• Verify remediation actions and conduct follow-up assessments.
• Collaborate with system owners, ISSOs, and stakeholders throughout assessments.

Skills

RMF execution

A&A documentation

Vulnerability analysis

Assessment & Authorization

Cloud security assessments

Documentation skills

Interacting with ISSOs

Education

BA/BS degree or equivalent experience

Tools

eMASS

STIG tooling

Job description

Everforth Apex is seeking a Security Control Assessor in Alexandria, VA to evaluate, test, and validate security controls within information systems, with RMF emphasis. You will develop A&A artifacts, SARs, SSPs, and POA&Ms, and guide remediation actions through authorization.

You will perform risk-based assessments, vulnerability analysis, and collaborative security activities with ISSOs and system owners to ensure compliant, secure operations.