Security Control Assessor Representative (SCAR)

darkwolfsolutions; Ogden (UT); On-site; USD 130,000 - 180,000; Full time

Job summary

Dark Wolf is seeking a Security Controls Assessor Representative (SCAR) for an on-site role at Hill Air Force Base, Ogden, Utah. You will work with fellow SCARs, SCAs, ISSMs, PMs, and AO reps to obtain and maintain ATOs by following the RMF framework.

Required qualifications include 10+ years in related roles, RMF/NIST SP 800-53 expertise, and TS clearance eligibility. This is a full-time, on-site position with strict compliance and federal requirements.

Qualifications

• Mastery of the RMF, including all seven steps and knowledge of NIST SP 800-53.
• Deep understanding of Windows/Linux OS hardening (STIGs).
• Experience with vulnerability scanning (ACAS/Tenable.sc/Nessus) and log analysis (Splunk/Elastic Stack).
• Experience developing/reviewing SSPs, SARs, and POA&Ms.
• Ability to articulate residual risk to Authorizing Officials.
• US citizenship and Top Secret clearance eligibility.
• Bachelor's degree or 3+ years of relevant experience in lieu of degree.

Responsibilities

• Review, assess, and provide advice to SCA/AO throughout the RMF process for assigned programs.
• Collaborate with SCARs, SCAs, ISSMs, PMs, and AO representatives to obtain and maintain ATO approvals.
• Prepare and review System Security Plans (SSPs) and Security Assessment Reports (SARs).
• Identify risks, document actions, and support risk-based decision making.

Skills

RMF Knowledge

NIST SP 800-53

Windows/Linux hardening

Vulnerability scanning

DoD security requirements

SSP/SAR/POA&M

US Citizenship

Top Secret/SCI eligibility

Education

Bachelor's degree or equivalent experience

Tools

ACAS/Tenable.sc/Nessus

SCAP/STIG tools

Splunk/Elastic Stack

Job description

Dark Wolf is hiring in Ogden, Utah for a Security Controls Assessor Representative (SCAR). This position works with fellow SCARs, Security Controls Assessors (SCAs), Information System Security Managers (ISSM), Program Managers (PM), and Authorizing Official (AO) representatives to obtain and maintain Authority toOperate (ATO) approvals for various AFNWC weapon subsystems and supporting IT systems by adhering to the Risk Management Framework (RMF). This position is responsible for reviewing, assessing, and providing advice/recommendations to the SCA/AO throughout the RMF process for assigned programs. This is an on-site position on Hill Air Force Base.

Required Qualifications

• 10+ years of relevant work experience, including experience as an ISSO, ISSM, SCA, SCAR, or similar roles.
• Mastery of the NIST Risk Management Framework (RMF), including all seven steps and in-depth knowledge of NIST SP 800-53 security controls and their application to complex government information systems.
• Comprehensive technical understanding and practical experience with Windows/Linux OS hardening (including STIGs), network protocols (TCP/IP), firewall configurations, IDS/IPS, cloud security (FedRAMP, AWS/Azure GovCloud), virtualization, and database security.
• Hands-on experience with vulnerability scanning (ACAS/Tenable.sc/Nessus), configuration assessment (SCAP/STIG tools), and log analysis/SIEM platforms (e.g., Splunk, Elastic Stack) to identify and evaluate security posture. Expert-level knowledge of DoD/Agency-specific security requirements (e.g., DoDI 8500.01, CNSSI 1253), IAVMs, and STIG implementation/verification.
• Proven ability to develop and review System Security Plans (SSPs), write comprehensive Security Assessment Reports (SARs), and manage Plans of Action and Milestones (POA&Ms).
• Strong capability in analyzing control effectiveness, identifying critical risks, and articulating residual risk to Authorizing Officials (AOs).
• A Bachelors degree in a relevant field or 3+ years of relevant experience in lieu of degree.
• US Citizenship and an active Top Secret security clearance with SCI eligibility.

This location is located on Hill AFB in Ogden, Utah. On-site presence is expected 5 days per week. We are hiring for multiple levels, with base salary estimates ranging from $130,000.00 - $180,000.00, commensurate on experience and technical skillset.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.