Security Control Assessor (SCA) / RMF Information Analyst

Delta Solutions & Strategies; Washington (District of Columbia); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) plan

Job summary

Delta Solutions & Strategies is seeking a full-time Security Control Assessor (SCA) / RMF Information Analyst to support HQ United States Space Force S6 Cyber Governance at the Pentagon, Washington, DC. The role provides Advisory and Assistance Services to HQ USSF components, including the CSO, CHCO, S6, and related directorates.

As an SCA, you will lead RMF documentation, evaluate compliance with NIST and DoD standards, coordinate with ISSOs/ISSMs and System Owners, advise AO representatives on

Qualifications

• Bachelor’s Degree (Master’s preferred) plus a minimum of 2 years of experience in cybersecurity, RMF compliance, or control assessment.
• Familiarity with DoDI 8510.01, AFMAN 17-1303, and USSF RMF procedures for SCA roles.
• Experience conducting control assessments at multiple classification levels (IL2-IL6, up to TS/SCI).
• Experiencing authoring SAPs, SARs, and POA&M in eMASS.
• Possession of DoD 8140/8570 baseline IA certification (e.g., CAP, CASP+, CISSP, or CISM) at IAM-II or IASAE-I level.
• TS/SCI required; Top Secret clearance with SCI eligibility acceptable.

Responsibilities

• Serve as Security Control Assessor (SCA) or SCA-support lead for designated USSF systems, conducting independent assessment of implemented security controls and providing documents such as Security Assessment Reports (SARs) and recommendations to the Authorizing Official (AO).
• Lead development and review of RMF documentation, including the Security Assessment Plan (SAP), SAR, Risk Assessment Report (RAR), and Plan of Action and Milestones (POA&M).
• Evaluate compliance with NIST SP 800-53, CNSSI 1253, DoDI 8510.01, and USSF RMF governance, verifying eMASS artifacts for accuracy and completeness.
• Coordinate with ISSOs, ISSMs, and System Owners to ensure corrective actions are tracked to closure and reflected in POA&Ms.
• Advise S6G AO Designated Representatives (AODRs) on system readiness for ATO, re-authorization, or continuous monitoring phases.
• Support Security Authorization Boundary development, system categorization (per ITCSC), and overlay selection (Space, Privacy, Mission-Specific).
• Contribute to Continuous Monitoring (CONMON) strategy and risk dashboards in alignment with the DoD CIO Cybersecurity Risk Management Construct (Sep 2025).
• Mentor junior analysts (e.g., SCA Support Analysts) in control assessment methodology, artifact generation, and eMASS data entry to build internal SCA bench strength.
• Review and validate security documentation, including SSPs, SARs, and POA&Ms.
• Conduct assessments of information systems to ensure RMF compliance with RMF, NIST, and DoD standards.
• Integrate DevSecOps pipeline security controls and AI/ML assurance activities into RMF evidence collection to support cATO processes.
• Interface remotely and in person with Air Force and Space Force organizations to advance cybersecurity, policy, and infrastructure readiness.

Skills

Cybersecurity

RMF compliance

Control assessment

Communication

Education

Bachelor's degree (Master's preferred)

Tools

eMASS

ACAS

Nessus

STIG Viewer

XACTA

Job description

Delta Solutions & Strategies is seeking a full-time Security Control Assessor (SCA) / RMF Information Analyst supporting Headquarters United States Space Force (HQ USSF) S6 Cyber Governance and ATO/RMF initiatives at the Pentagon, Washington, DC. This position provides Advisory and Assistance Services (A&AS) to HQ USSF components, including the Chief of Space Operations (CSO), Chief Human Capital Office (CHCO), Deputy Chief of Space Operations for Cyber and Data (S6), and associated directorates.

What you will be doing:

• Serve as Security Control Assessor (SCA) or SCA-support lead for designated USSF systems, conducting independent assessment of implemented security controls and providing documents such as Security Assessment Reports (SARs) and recommendations to the Authorizing Official (AO).
• Lead development and review of RMF documentation, including the Security Assessment Plan (SAP), SAR, Risk Assessment Report (RAR), and Plan of Action and Milestones (POA&M).
• Evaluate compliance with NIST SP 800-53, CNSSI 1253, DoDI 8510.01, and USSF RMF governance, verifying eMASS artifacts for accuracy and completeness.
• Coordinate with Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), and System Owners to ensure corrective actions are tracked to closure and reflected in POA&Ms.
• Advise S6G Authorizing Official Designated Representatives (AODRs) on system readiness for ATO, re-authorization, or continuous monitoring phases.
• Support Security Authorization Boundary development, system categorization (per ITCSC), and overlay selection (Space, Privacy, Mission-Specific).
• Contribute to Continuous Monitoring (CONMON) strategy and risk dashboards in alignment with the DoD CIO Cybersecurity Risk Management Construct (Sep 2025).
• Mentor junior analysts (e.g., SCA Support Analysts) in control assessment methodology, artifact generation, and eMASS data entry to build internal SCA bench strength.
• Review and validate security documentation, including System Security Plans (SSPs), SARs, and POA&Ms.
• Conduct assessments of information systems to ensure compliance with RMF, NIST, and DoD standards.
• Integrate DevSecOps pipeline security controls and AI/ML assurance activities into RMF evidence collection to support rapid or continuous ATO (cATO) processes.
• Interface remotely and in person with Air Force and Space Force organizations to advance cybersecurity, policy, and infrastructure readiness.

What you will need:

• Bachelor’s Degree (Master’s preferred) plus a minimum of 2 years of experience in cybersecurity, RMF compliance, or control assessment.
• Familiarity with DoDI 8510.01, AFMAN 17-1303, and USSF RMF procedures for SCA roles.
• Experience conducting control assessments at multiple classification levels (IL2-IL6, up to TS/SCI).
• Experiencing authoring SAPs, SARs, and POA&Ms in eMASS.
• Possession of DoD 8140/8570 baseline IA certification (e.g., CAP, CASP+, CISSP, or CISM) at IAM-II or IASAE-I level.
• TS/SCI required; Top Secret clearance with SCI eligibility acceptable.

Desired Skills and Experience:

• Prior experience supporting Authorizing Official (AO) and SCA functions within DoD Components or Combatant Commands.
• Proficiency with eMASS, ACAS, Nessus, STIG Viewer, XACTA, and other compliance tools.
• Understanding of Zero Trust principles and architectures.
• Knowledge of cross-domain solutions, boundary protection mechanisms, and secure data transfer protocols.
• Understanding of space systems cybersecurity, DevSecOps, and mission resilience.
• Excellent communication, analytical, and problem-solving skills.
• Commitment to supporting the USSF mission and strengthening national security through effective cyber governance.

Delta Solutions & Strategies offers a generous benefits package to include medical, dental, vision, life insurance, 401(k), DTO, paid holidays, parental, military and jury duty paid leaves.

We are an Equal Opportunity Employer. We do not and will not discriminate in employment and personnel practices based on race, sex, age, disability, veteran status, religion, national origin or any other basis prohibited by applicable law. Hiring, transferring, and promotion practices are performed without regard to the above listed items. EEO/AAP, M, F, V, D