Security Control Assessor – Cloud, AI & DoD RMF

Dark Wolf Solutions, LLC; Herndon (VA); Hybrid; USD 135,000 - 160,000; Full time

Job summary

Dark Wolf Solutions seeks a Security Control Assessor/Representative to lead assessments for high-priority DoD AI projects. The role, based in Arlington, VA with hybrid/remote options, spans AWS cloud security, DevSecOps, and RMF artifacts across multi-classification environments.

You will develop SSPs/SAPs/SARs/POA&Ms, conduct risk evaluations, and coordinate with AOs to produce decision-ready risk briefings. Requires active TS clearance and DoD IAM II/III.

Qualifications

• Active Top Secret security clearance required.
• 5–7+ years of security control assessment experience for DoD/federal systems.
• Solid understanding of AWS cloud services and cloud-native security controls.
• Experience with RMF artifacts (SSPs, SAPs, SARs, POA&Ms).
• Knowledge of NIST SP 800-53, 800-37, FedRAMP baselines.

Responsibilities

• Lead security assessment efforts and develop reusable playbooks.
• Evaluate control effectiveness across AWS, CI/CD pipelines, and GenAI/LLM stacks.
• Coordinate TEMs, Discovery & Framing workshops, and cross-functional communication.
• Serve as SME and lead developer for offensive tooling integration.
• Review and tailor assessment packages (SSPs, SAPs, SARs, POA&Ms).
• Assess risks in AI/LLM implementations; address API exposure and data controls.
• Support ConMon, risk evaluations, and cloud-architecture reviews.
• Coordinate with AOs, PMs, and engineers for risk briefings and ATOs.
• Provide input for cybersecurity engineering and penetration testing.

Skills

Top Secret clearance

DevSecOps

RMF/SSP knowledge

Communication to execs

Education

DoD 8570/8140 IAM Level II or III

AWS cloud security knowledge

Tools

GitLab CI/CD

AWS Cloud services (EC2, S3, IAM, VPC)

eMASS/XACTA

Job description

Dark Wolf Solutions seeks a Security Control Assessor/Representative to lead assessments for high-priority DoD AI projects. The role, based in Arlington, VA with hybrid/remote options, spans AWS cloud security, DevSecOps, and RMF artifacts across multi-classification environments.

You will develop SSPs/SAPs/SARs/POA&Ms, conduct risk evaluations, and coordinate with AOs to produce decision-ready risk briefings. Requires active TS clearance and DoD IAM II/III.