SCAR: DoD RMF Cybersecurity Lead

Trinzic; Alexandria (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

KBR is seeking a Security Control Assessor Representative (SCAR) to join our team in Virginia. The role focuses on evaluating security controls across DoD networks and applications, identifying vulnerabilities, and coordinating corrective actions with TRMC cybersecurity teams.

As an SCA, you will lead audits, develop compliance processes, and support RMF package readiness for authorization. A TS/SSBI clearance and travel up to 25% are required.

Qualifications

• RMF experience and DoD security controls assessment.
• Experience with RMF authorizations in the DoD environment.
• Familiarity with vulnerability scanning tools.
• Knowledge of cloud service models SaaS, IaaS, and PaaS.
• Bachelor’s degree in engineering, CS, or IT.
• Advanced IAM III certification per DoD 8140.03.
• Willingness to travel 25% and ability to interface with senior leadership.
• Top Secret/SSBI clearance.

Responsibilities

• Conduct in-depth assessments of management, operations, and technical security controls.
• Analyze information and document vulnerability levels with detailed findings.
• Develop plans to address vulnerabilities and monitor security.
• Lead audits for applications, networks, and systems and ensure compliance.
• Develop security compliance processes for external services.
• Verify posture implementations and document deviations.
• Provide RMF guidance to system engineers and program managers.
• Review POAMs, SARs, SAPs.
• Participate in security assessment meetings with PMs and CISOs.

Skills

RMF assessment

DoD controls

Vulnerability scanning

Cloud security

Security audits

Clearance TS/SSBI

Communication

A&A packages

Education

Bachelor’s degree (engineering, CS, IT)

Tools

STIGs

Vulnerability scanners

RMF tools

Job description

KBR is seeking a Security Control Assessor Representative (SCAR) to join our team in Virginia. The role focuses on evaluating security controls across DoD networks and applications, identifying vulnerabilities, and coordinating corrective actions with TRMC cybersecurity teams.

As an SCA, you will lead audits, develop compliance processes, and support RMF package readiness for authorization. A TS/SSBI clearance and travel up to 25% are required.