Security Control Assessor — AI/Cloud Security Lead

Dark Wolf; Arlington (TX); On-site; USD 135,000 - 150,000; Full time

Job summary

Dark Wolf Solutions in Arlington, VA, seeks Security Control Assessors to lead security assessments on AI/LLM-focused programs across multiple classifications. You will work at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, evaluating controls within AWS and CI/CD environments.

Active TS clearance and RMF experience are required. The role emphasizes rapid prototyping, formal RMF artifacts, and delivering risk-informed decisions to program leadership.

Qualifications

• Active Top Secret clearance.
• Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC)
• 3–5+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems
• Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments.
• Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines.
• Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms)
• Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams.
• Hands-on experience navigating government GRC repositories, such as eMASS or XACTA.

Responsibilities

• Execute formal SCA/R duties.
• Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows.
• Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks.
• Partner directly with cybersecurity engineering and DevSecOps prototyping teams to integrate security controls early in the development lifecycle.
• Review, author, and maintain assessment packages—including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms—tailored to rapid prototyping and AI systems.
• Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies.
• Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments.
• Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations.
• Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects.

Skills

Top Secret clearance

IAM Level II/III

Security assessment

NIST 800-53

RMF artifacts

GRC tools

AWS security

Communication skills

CI/CD security

Job description

Dark Wolf Solutions in Arlington, VA, seeks Security Control Assessors to lead security assessments on AI/LLM-focused programs across multiple classifications. You will work at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, evaluating controls within AWS and CI/CD environments.

Active TS clearance and RMF experience are required. The role emphasizes rapid prototyping, formal RMF artifacts, and delivering risk-informed decisions to program leadership.