Senior RMF Security Control Assessor - Hybrid

BuddoBot Inc.; Herndon (VA); Hybrid; USD 140,000 - 145,000; Full time

Job summary

Dark Wolf Solutions seeks a Senior Security Control Assessor Representative (SCAR) to conduct independent assessments of IT systems’ security controls, ensuring effectiveness and compliance with RMF, NIST CSF, and DoD/AF requirements.

The SCAR will review security artifacts, support A&A activities, and emphasize DoD GovCloud testing and artifact validation, with a hybrid work schedule. Candidates need 15+ years in cyber, TS clearance, and relevant certifications.

Qualifications

• 15+ years of relevant cyber experience.
• 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer.
• Cloud Platform experience (AWS/Azure/GCP) and hands-on eMASS/XACTA experience.

Responsibilities

• Evaluate IT infrastructure risk and define artifacts to meet DoD/AF requirements.
• Assess RMF/CSF controls and testing plans for key controls.
• Review POA&Ms and advocate for remediation actions with AO/CISO.
• Provide concise internal control conclusions and policy recommendations.
• Support A&A activities with artifact quality and compliance guidance.

Skills

SCAR / RMF Engineer

NIST CSF

DoD/AF guidance

eMASS / XACTA

Cloud experience (AWS/Azure/GCP)

Security certifications

Technical writing

Briefings to leadership

Top Secret clearance

US Citizenship

Education

B.A. or B.S. Information Security or related

Tools

eMASS

XACTA

JIRA

Confluence

SharePoint

Job description

Dark Wolf Solutions seeks a Senior Security Control Assessor Representative (SCAR) to conduct independent assessments of IT systems’ security controls, ensuring effectiveness and compliance with RMF, NIST CSF, and DoD/AF requirements.

The SCAR will review security artifacts, support A&A activities, and emphasize DoD GovCloud testing and artifact validation, with a hybrid work schedule. Candidates need 15+ years in cyber, TS clearance, and relevant certifications.