Security Control Assessor for DoD AI & Cloud (Hybrid)

BuddoBot Inc.; Washington (District of Columbia); Hybrid; USD 135,000 - 160,000; Full time

Job summary

Dark Wolf Solutions is seeking Security Control Assessors/Representatives to lead security control assessments across high-priority DoD AI projects. You will evaluate controls in AWS, DevSecOps pipelines, and GenAI stacks, coordinating with program offices and engineering leads.

The role combines cybersecurity engineering with cloud architecture, requiring TS clearance, RMF expertise, and proven experience in SSPs/SAPs/SARs. Arlington, VA with hybrid/remote options.

Qualifications

• Active TS security clearance required for DoD work.
• Experience conducting security control assessments for DoD or federal systems.
• Strong AWS security engineering background.
• Proven RMF artifacts experience (SSPs, SAPs, SARs, POA&Ms).
• Excellent written and verbal communication of risk to executives.
• Experience with government GRC repositories (eMASS or XACTA).
• Knowledge of NIST 800-53/800-37 and FedRAMP baselines.

Responsibilities

• Execute formal SCA/R duties.
• Lead assessment efforts with reusable playbooks/frameworks for rapid AI deployment.
• Evaluate controls across AWS, DevSecOps pipelines, microservices, containers, and GenAI stacks.
• Lead TEMs and cross-functional communications.
• Act as SME for offensive tooling integration.
• Review and maintain SSPs/SAPs/SARs/POA&Ms for rapid prototyping AI systems.
• Assess AI/LLM risk (API exposure, vector DB access, etc.).
• Support ConMon and risk evaluations across multi-tenant environments.
• Coordinate with AOs, program managers, and engineering leads for risk briefings and ATOs.
• Provide input for cybersecurity engineering and penetration testing activities.

Skills

Top Secret clearance

DoD 8570 IAM Level II/III

Security assessments

AWS cloud security

GitLab CI/CD

NIST SP 800-53/800-37

RMF artifacts

Communications

GRC repositories (eMASS/XACTA)

AI RMF familiarity

Secure AI design patterns

Cloud AI platforms (Bedrock/SageMaker)

IaC (Terraform/CloudFormation)

Container security (EKS/ECS/Docker)

AWS Certifications (Security/Saa)

Offensive security

Job description

Dark Wolf Solutions is seeking Security Control Assessors/Representatives to lead security control assessments across high-priority DoD AI projects. You will evaluate controls in AWS, DevSecOps pipelines, and GenAI stacks, coordinating with program offices and engineering leads.

The role combines cybersecurity engineering with cloud architecture, requiring TS clearance, RMF expertise, and proven experience in SSPs/SAPs/SARs. Arlington, VA with hybrid/remote options.