Senior Remote RMF/NIST Expert Lead - SCA

Disruptive Solutions, LLC; Sterling (VA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Disruptive Solutions, LLC, a SDVOSB delivering cybersecurity solutions for federal and commercial clients, seeks a Lead Security Control Assessor to lead security control assessments for DoD and federal agencies. The role covers on-prem, hybrid, and cloud environments, with RMF guidance and executive risk reporting. You will mentor teams, deliver SAPs and SARs, and present findings to senior leadership. This is a full-time position with flexible work arrangements.

Qualifications

• 7+ years of cybersecurity experience supporting federal information systems.
• 5+ years performing Security Control Assessments.
• Experience leading teams of three or more cybersecurity professionals.
• Expert knowledge of NIST SP 800-53 Rev. 5, 800-53A, 800-37, 800-115, 800-30.
• Experience developing SAPs, SARs, and executive-level briefings.
• Experience assessing enterprise networks and cloud environments (SaaS, PaaS, IaaS).
• Experience interpreting vulnerability data and validating remediation activities.

Responsibilities

• Lead teams of Security Control Assessors supporting multiple federal information systems.
• Plan, coordinate, and execute security control assessments throughout the RMF lifecycle.
• Develop SAPs, SARs, executive briefings, and risk recommendations.
• Lead technical reviews of SSPs, POA&Ms, and authorization packages.
• Evaluate technical, operational, and management controls across on-prem, cloud, and hybrid environments.
• Assess AWS, Azure, SaaS, PaaS, and IaaS implementations for compliance.
• Lead vulnerability analysis and validate remediation activities.
• Support penetration testing activities and present findings to stakeholders.
• Perform API security testing and use automation to improve assessment quality.
• Review assessment quality, mentor junior assessors, and manage deliverables.

Skills

NIST RMF knowledge

Security Control Assessments

Leadership

Cloud security

Government cybersecurity

Executive communication

Vulnerability assessment tools

Scripting (PowerShell/Python)

API security testing

Tools

Tenable/Nessus

Qualys

Burp Suite

Imperva

Prisma Cloud

Core Impact

Netsparker/Invicti

AppDetective

Job description

Disruptive Solutions, LLC, a SDVOSB delivering cybersecurity solutions for federal and commercial clients, seeks a Lead Security Control Assessor to lead security control assessments for DoD and federal agencies. The role covers on-prem, hybrid, and cloud environments, with RMF guidance and executive risk reporting. You will mentor teams, deliver SAPs and SARs, and present findings to senior leadership. This is a full-time position with flexible work arrangements.