Security Assessor: RMF & Cloud Risk Expert

Method, Inc.; Washington (District of Columbia); On-site; USD 110,000 - 150,000; Full time

Job summary

Spry Methods seeks a Security Assessor in DC to join our team and perform comprehensive risk-based security assessments. The role emphasizes RMF processes, SA&A activities, and testing across networks, systems, and applications in cloud environments.

The candidate should bring 5+ years of security assessment experience, expertise in MS Azure and AWS, and the ability to translate risk into actionable mitigation plans for customers.

Qualifications

• Requires at least 5 years of relevant security assessment experience.
• Bachelor's Degree or 4 years of specialized experience are acceptable.
• Strong background in security assessor roles and RMF knowledge.

Responsibilities

• Maintain strong working knowledge of IT security requirements and risk management processes.
• Conduct full cycle Security Assessment & Authorization (SA&A).
• Test network, system, and application security controls per NIST RMF.
• Analyze vulnerability scans and interpret risks; validate data with manual checks.
• Assist customers in understanding risk and providing mitigation steps.
• Create Security Assessment Plans, Reports, and Plan of Actions & Milestones (POA&Ms).
• Interview personnel, review documentation, and verify control evidence.

Skills

RMF knowledge

Risk assessment

Vulnerability analysis

SA&A (Security Assessments)

Cloud security

NIST controls testing

Education

Bachelor's degree or equivalent

Tools

MS Azure

AWS

Job description

Spry Methods seeks a Security Assessor in DC to join our team and perform comprehensive risk-based security assessments. The role emphasizes RMF processes, SA&A activities, and testing across networks, systems, and applications in cloud environments.

The candidate should bring 5+ years of security assessment experience, expertise in MS Azure and AWS, and the ability to translate risk into actionable mitigation plans for customers.