Senior RMF Security Assessor — Remote

Blu Omega LLC; Arlington (VA); On-site; USD 120,000 - 137,000; Full time

Benefits offered by this job

Medical, Dental, Vision coverage

401(k) with company match

Life and AD&D insurance

Disability coverage

EAP and mental health resources

Telehealth services

PTO and paid holidays

Wellness programs

Job summary

Blu Omega LLC is seeking a Senior Security Control Assessor (SCA) to perform thorough RMF-based security and privacy control assessments for IT systems in a Federal environment.

The role includes evaluating controls, supporting ATO processes, and identifying risks while collaborating with engineering teams. Remote/local to DC Metro with Public Trust eligibility required; FDIC program context provided.

Qualifications

• 7+ years of relevant cybersecurity experience.
• Master's degree or equivalent certifications and experience.
• Hands-on experience conducting security control assessments using NIST SP 800-53/800-37.
• Knowledge of the RMF lifecycle, risk assessment, threat modeling, and POA&M tracking.
• Experience with vulnerability scanning tools (Nessus, Qualys).
• Understanding of secure network and system architectures.
• Ability to obtain and maintain Public Trust clearance.

Responsibilities

• Conduct independent security control assessments in accordance with NIST SP 800-37/800-53
• Evaluate technical, operational, and management controls for effectiveness
• Support system authorizations (ATO), including reviewing security documentation such as SSPs and POA&Ms
• Identify and document risks and compliance gaps, providing mitigation strategies
• Analyze impacts of system or network changes on security posture
• Participate in governance and risk review boards, advising on security implications
• Verify proper implementation of security controls with system owners and engineering teams
• Support vulnerability assessments, compliance audits, and configuration reviews
• Contribute to RMF documentation, including security plans, test plans, and risk assessments

Skills

7+ years cybersecurity experience

Education

Master's degree or equivalent

Tools

Nessus

Qualys

Job description

Blu Omega LLC is seeking a Senior Security Control Assessor (SCA) to perform thorough RMF-based security and privacy control assessments for IT systems in a Federal environment.

The role includes evaluating controls, supporting ATO processes, and identifying risks while collaborating with engineering teams. Remote/local to DC Metro with Public Trust eligibility required; FDIC program context provided.