RMF Security Controls Assessor (SCAR)

KBR Careers; Patuxent (MD); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

401K with company match

Medical, dental, vision benefits

Paid time off

Flexible work schedule

Job summary

KBR is seeking a Security Control Assessor Representative (SCAR) to support TRMC and RDT&E communities in Maryland. You will evaluate security controls, identify vulnerabilities, and work with the TRMC Cybersecurity team to implement corrective actions.

Responsibilities include conducting risk assessments, developing remediation plans, and overseeing audits for applications, networks, and systems in line with DoD policies and STIGs. A Top Secret/SSBI clearance is required.

Qualifications

• Experience with RMF assessments for DoD systems.
• Bachelor's degree in engineering, CS, or IT.
• Top Secret/SSBI clearance required.

Responsibilities

• Conduct in-depth assessments of the management, operations, and technical security controls.
• Analyze information and prepare reports describing the vulnerability level of the network/system with specific detail as to what compromises data systems.
• Develop a plan to address vulnerabilities and continue to monitor the security of network systems.
• Develop and implement cybersecurity independent audit processes for application software/networks/systems with TRMC Cybersecurity Team Lead oversight.
• Develop security compliance processes/audits for external services (e.g., cloud providers).
• Verify security postures are implemented as stated and document deviations with corrective actions.
• Perform validation steps, compare actual vs. expected results to identify risks.
• Maintain information systems assurance and accreditation materials.
• Provide A&A package leadership, review Plans of Actions and Milestones, SARs, SAPs.
• Support RMF guidance to system engineers and program managers on risk matters.

Skills

RMF experience

DoD Security Controls

Vulnerability scanning

Cybersecurity concepts

Communication skills

Education

Bachelor degree in engineering/CS/IT

Tools

STIGs

SAST/VA tools

Job description

KBR is seeking a Security Control Assessor Representative (SCAR) to support TRMC and RDT&E communities in Maryland. You will evaluate security controls, identify vulnerabilities, and work with the TRMC Cybersecurity team to implement corrective actions.

Responsibilities include conducting risk assessments, developing remediation plans, and overseeing audits for applications, networks, and systems in line with DoD policies and STIGs. A Top Secret/SSBI clearance is required.