Security Assessor – RMF, NIST & Cloud Risk Expert

Sprymethods; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

Spry Methods is seeking a Security Assessor to join our DC team. You will conduct security assessments, review documentation, and interview personnel to evaluate controls and risks in cloud and on-prem environments.

The ideal candidate has 5+ years of security assessor experience, strong RMF and SA&A skills, and proficiency in NIST controls. You will prepare plans, reports, and POA&Ms and help customers understand risk and mitigation strategies.

Qualifications

• Minimum 5 years of security assessor experience.
• Experience in RMF process and in full cycle SA&A.
• Experience testing NIST controls across admin and technical perspectives.
• Ability to analyze vulnerability scans, interpret risks and perform manual checks.
• Experience creating Security Assessment Plans, Reports and POA&Ms.
• Strong cloud security experience (Azure in AWS environments).
• CSAM knowledge is a plus.

Responsibilities

• Conduct security assessments across cloud and on-prem environments.
• Review documentation, perform interviews, and collect evidence.
• Evaluate RMF compliance and prepare POA&Ms and formal reports.
• Communicate risk findings and mitigation options to customers.
• Lead SA&A activities through the full assessment lifecycle.

Skills

IT Security

Risk Management

Contingency Planning

Secure Data Communications

SA&A

Vulnerability Analysis

Risk Mitigation

Assessment Reports

RMF

Cloud Security

NIST Controls

Education

Bachelor's Degree

Specialized Experience (4 yrs)

Job description

Spry Methods is seeking a Security Assessor to join our DC team. You will conduct security assessments, review documentation, and interview personnel to evaluate controls and risks in cloud and on-prem environments.

The ideal candidate has 5+ years of security assessor experience, strong RMF and SA&A skills, and proficiency in NIST controls. You will prepare plans, reports, and POA&Ms and help customers understand risk and mitigation strategies.