Senior RMF DoD Security Controls Assessor

KBR, Inc; Alexandria (VA); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

401K plan with company match

medical

dental

vision

life insurance

AD&D

flexible spending account

paid time off

flexible work schedule

Job summary

KBR, Inc. seeks a Security Control Assessor Representative to support RMF assessments and DoD security control reviews. The role involves conducting in-depth security control assessments, analyzing vulnerabilities, and coordinating risk-mitigation actions with the Cyber team and AO.

A strong background in RMF and DoD frameworks is required. The position includes travel around 25% and offers compensation aligned with Maryland, Virginia, DC and California markets, with benefits including 401K,

Qualifications

• Experience with RMF and assessing DoD Security Controls.
• Experience conducting security risk assessments for RMF authorizations.
• Familiarity with vulnerability scanning tools and identifying vulnerabilities.

Responsibilities

• Conduct assessments of management, operations, and technical security controls.
• Analyze information and report vulnerability levels with detailed impact notes.
• Develop plans to address vulnerabilities and monitor security postures.
• Lead audits for applications, networks, and systems to ensure compliance with DoD cybersecurity requirements.
• Develop security compliance processes for external services (cloud providers, data centers).
• Review plans, SARs, POAMs and assist in risk management discussions.
• Provide RMF guidance to system engineers and program managers on risk matters.

Skills

RMF expertise

DoD security controls

risk assessments

cloud security understanding

communication skills

project coordination

Education

Bachelor's degree in engineering, CS, IT or related field

Tools

Vulnerability scanning tools

A&A process knowledge

Job description

KBR, Inc. seeks a Security Control Assessor Representative to support RMF assessments and DoD security control reviews. The role involves conducting in-depth security control assessments, analyzing vulnerabilities, and coordinating risk-mitigation actions with the Cyber team and AO.

A strong background in RMF and DoD frameworks is required. The position includes travel around 25% and offers compensation aligned with Maryland, Virginia, DC and California markets, with benefits including 401K,