Senior Control Validation & RMF Security Lead (Remote)

BMA; Virginia (MN); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Healthcare coverage options

401(k) with 6% match

Employee Stock Ownership Plan (ESOP)

Job summary

A cybersecurity services company is seeking a Control Validation Security Specialist – Senior to provide advanced cybersecurity support for federal systems. This fully remote position requires expertise in DoD cybersecurity policies, performing validation of security controls, and conducting audits across complex networks. Candidates must hold DoD certification and have extensive experience with RMF principles. The role emphasizes independent assessments and detailed communication with stakeholders to ensure compliance with cybersecurity standards.

Qualifications

• 3+ years of experience with DoD cybersecurity policy like DoD 8500-series.
• 2+ years of experience using eMASS for RMF authorization activities.
• Demonstrated ability to perform IT audits and security validation.

Responsibilities

• Conduct cybersecurity control validation and IT audits across information systems.
• Support RMF authorization process with technical reviews of documentation.
• Perform vulnerability assessments and analyze security weaknesses.

Skills

Understanding DoD cybersecurity policy

Risk Management Framework principles

Analytical skills

Microsoft Office proficiency

Network architecture knowledge

Communication skills

Education

DoD 8670.01/8140 IAM Level III certification

Tools

Enterprise Mission Assurance Support Service (eMASS)

Job description

A cybersecurity services company is seeking a Control Validation Security Specialist – Senior to provide advanced cybersecurity support for federal systems. This fully remote position requires expertise in DoD cybersecurity policies, performing validation of security controls, and conducting audits across complex networks. Candidates must hold DoD certification and have extensive experience with RMF principles. The role emphasizes independent assessments and detailed communication with stakeholders to ensure compliance with cybersecurity standards.