Security Control Assessor Representative (SCAR) with Security Clearance

Astrion; El Segundo (CA); On-site; USD 144,000 - 176,000; Full time

Job summary

Astrion is seeking a Senior Cybersecurity Engineer SME to join our STS-3 program in El Segundo, CA. You will provide direct Assessment & Authorization support to the Space Systems Command AO and Security Control Assessor, ensuring secure operation of mission-critical networks and sensitive data across SSC RDT&E enclaves.

You will work hands-on in Cybersecurity Analysis, RMF compliance, and enterprise policy driving mission assurance for key space systems, including vulnerability management and

Qualifications

• 15+ years of cybersecurity experience in DoD-related environments.
• Familiarity with RMF and DoD cybersecurity processes.
• Hands-on knowledge of eMASS and RMF artifacts.
• Active TS/SCI clearance required.
• Experience with ATO processes and security controls.

Responsibilities

• Support the Authorizing Official and Security Control Assessor under RMF.
• Develop and manage eMASS entries and A&A packages.
• Maintain C&A schedules, ITIPS/ITDR, and RMF compliance.
• Lead vulnerability management and security test efforts.
• Travel for onsite assessments as required.

Skills

RMF experience

eMASS hands-on

Active DoD TS/SCI clearance

15+ years cybersecurity

DoD/USSF familiarity

Tools

eMASS

Job description

Overview Senior Cybersecurity Engineer (SCAR) Location: El Segundo, CA Job Status: Full time SALARY RANGE: Estimated $160,000 + annually* *depending on experience, certifications, and qualifications Clearance Required: Active DoD TS/SCI Astrion is seeking a Senior Cybersecurity Engineer SME to join our prime contract supporting STS-3 in El Segundo, CA. This role will provide direct Assessment & Authorization (A&A) support to the Space Systems Command Authorizing Officia and Security Conrol Assessor (SCA), ensuring the secure operations of enterprise networks, mission-critical systems, and sensitive data across Space Systems Command (RDT&E) Authorizing Official (AO) subordinate enclave. You will play a hands‑on role in Cybersecurity Analysis, Engineering, and Risk Management Framework (RMF) compliance, and Enterprise policy driving mission assurance for some of the nation's most important space systems.

REQUIRED QUALIFICATIONS / SKILLS

• 15+ years of cybersecurity experience supporting USSF, DoD, or related federal organizations.
• Familiarity with Risk Management Framework (RMF) protocols.
• Knowledge of USSF A&A procedures with hands‑on experience with eMASS
• Active DoD TS/SCI clearance (with current investigation).
• CompTIA Security+ or equivalent DoD 8570/8140 IAT/IAM certification.

PREFERRED QUALIFICATIONS / SKILLS

• Prior SCA / SCAR / ASCA experience within DoW and USSF.
• CISSP, GIAC, or equivalent advanced cybersecurity certification.
• Strong organizational, interpersonal, and communication skills with attention to detail.
• Technical MA or MS degree
• Advanced skills in Microsoft Word, Excel, PowerPoint, and Outlook.

RESPONSIBILITIES

• Support the Authorizing Official and Security Control Assessor by ensuring adherence to the DoD RMF process, driving cyber-hardening efforts, and tracking progress along the Road to ATO.
• Support A&A activities and provide cybersecurity engineering expertise for enterprise mission systems.
• Develop, update, and manage Enterprise Mission Assurance Support Service (eMASS) entries and coordinate A&A packages in accordance with DoDI 8510.01 (RMF).
• Maintain and report on C&A schedules, package status, and system registrations in ITIPS (formerly EITDR) in compliance with FISMA.
• Review and refine certification policies, procedures, and reports for new and evolving cyber system requirements.
• Conduct research and analysis to assess the impact of new DoD, USSF, DIA, and DISA cybersecurity directives.
• Support Vulnerability Management System (VMS) processes by documenting, tracking, and closing compliance findings.
• Contribute to Security Test & Evaluation (ST&E) efforts, penetration testing, and validation of cybersecurity controls.
• Revalidate cyber and IA controls for accredited systems and recommend improvements to strengthen mission assurance.
• Assess policy changes from higher headquarters and determine impact on current mission system security posture.
• Travel is required during onsite assessments. #CJ