Security Control Assessor – DoD AI & Cloud

BuddoBot Inc.; Arlington (VA); On-site; USD 135,000 - 160,000; Full time

Job summary

Dark Wolf Solutions seeks an experienced Security Control Assessor/Representative (SCA/R) to lead assessments across high-priority DoD AI initiatives in Arlington, VA. You will evaluate AWS security controls, RMF artifacts, and risk postures for rapid prototyping and GenAI stacks.

You will partner with cybersecurity engineering and DevSecOps teams to deliver decision-ready risk briefings and ATO recommendations, maintaining SSPs/SAPs/SARs/POA&Ms tailored to prototyping needs.

Qualifications

• Active Top Secret clearance
• DoD 8570/8140 IAM Level II or III certification
• 3-5+ years of security control assessments for DoD/federal systems
• Strong AWS cloud services knowledge and CI/CD security
• Solid RMF knowledge: NIST SP 800-53, 800-37, FedRAMP baselines
• Experience writing/evaluating RMF artifacts (SSPs, SAPs, SARs, POA&Ms)
• Experience with government GRC repositories (eMASS/XACTA)

Responsibilities

• Execute formal SCA/R duties.
• Lead security assessment efforts and develop reusable playbooks for rapid AI deployment.
• Evaluate security controls in AWS, DevSecOps, microservices, containers, and GenAI stacks.
• Collaborate with cybersecurity engineering and DevSecOps to bake security into the lifecycle.
• Review and maintain SSPs, SAPs, SARs, and POA&Ms for rapid prototyping AI systems.
• Assess risks for AI/LLM deployments including API exposure and vector DB controls.
• Support ConMon, risk evaluations, and cloud reviews across multi-tenant environments.
• Coordinate with AOs, program managers, and leads to provide risk briefings and ATO recommendations.
• Provide input for pentesting and cybersecurity engineering across prototypes.

Skills

Top Secret clearance

AWS security

Communication skills

Risk assessment mindset

Security control mindset

Education

DoD 8570/8140 IAM Level II/III

Security+ / CySA+ / CISSP / CCISO / CAP/CISC

Tools

eMASS

XACTA

Job description

Dark Wolf Solutions seeks an experienced Security Control Assessor/Representative (SCA/R) to lead assessments across high-priority DoD AI initiatives in Arlington, VA. You will evaluate AWS security controls, RMF artifacts, and risk postures for rapid prototyping and GenAI stacks.

You will partner with cybersecurity engineering and DevSecOps teams to deliver decision-ready risk briefings and ATO recommendations, maintaining SSPs/SAPs/SARs/POA&Ms tailored to prototyping needs.