Senior RMF Security Controls Assessor

Apavo Corporation; Arlington (VA); On-site; USD 130,000 - 185,000; Full time

Job summary

Apavo Corporation is seeking a Security Control Assessor to perform RMF-based security assessments for DoD/IC systems. You will use automated and manual testing, support RMF activities, and provide guidance to ensure controls are integrated into system designs.

The role requires TS/SCI clearance with CI polygraph eligibility, and extensive experience with RMF, NIST, and SA&A processes. This is an on-site Arlington, VA position supporting a sensitive mission.

Qualifications

• Experience with RMF 800-37 and continuous monitoring 800-137.
• Active TS/SCI with ability to obtain a CI polygraph.
• DOD 8140 IAM Level II (CAP/CASP/CISM/CISSP/GSLC/CCISO) required.
• Experience documenting SSP, SAR, SAP per NIST 800 guidance.
• Strong communication and cross-functional collaboration.

Responsibilities

• Advise the ISO on impact levels for Confidentiality, Integrity, Availability.
• Ensure security assessments are completed for each IS.
• Initiate a POA&M with identified weaknesses and deadlines.
• Evaluate SAR and provide recommendations to CISO/AO.
• Assess changes to systems that affect authorization.
• Serve as cybersecurity advisor to CISO/AO.
• Help develop the monitoring strategy and continuous monitoring plans.
• Document SAR risk levels for noncompliant controls.
• Document aggregate risk and key drivers for the assessment.
• Develop the continuous monitoring plan for information systems.

Skills

RMF 800-37

Continuous Monitoring 800-137

NIST SA&A

POA&M

Vulnerability Scanning

Cloud Security (FedRAMP/AWS/Azure)

Documentation (SSP/SAR/SAP)

Project Management

Education

Bachelor's Degree in Computer Science

Master's Degree preferred

Tools

Vulnerability Scanning Tools

RMF Tools

POA&M Tracking Tools

Microsoft Office

Job description

Apavo Corporation is seeking a Security Control Assessor to perform RMF-based security assessments for DoD/IC systems. You will use automated and manual testing, support RMF activities, and provide guidance to ensure controls are integrated into system designs.

The role requires TS/SCI clearance with CI polygraph eligibility, and extensive experience with RMF, NIST, and SA&A processes. This is an on-site Arlington, VA position supporting a sensitive mission.