Senior RMF Security Controls Assessor

KBR, Inc; Florida; On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

401K plan with company match

Medical insurance

Dental insurance

Vision insurance

Life insurance

AD&D

Flexible spending account

Disability insurance

Paid time off

Flexible work schedule

Job summary

KBR is seeking a Security Control Assessor Representative (SCAR) to join our cybersecurity team in the United States. The role focuses on RMF assessments, vulnerability management, and DoD-compliant security controls for complex defense systems.

The SCAR will conduct risk evaluations, develop remediation plans, and oversee independent audits for applications, networks, and cloud services. Travel about 25% is expected to support missions and audits.

Qualifications

• Experience with RMF and DoD Security Controls.
• Experience with cybersecurity in the RDT&E community.
• Proven experience conducting RMF security risk assessments.
• Familiarity with vulnerability scanning tools.
• Knowledge of confidentiality, integrity, and availability.
• IAM III certification per DoD 8140.03.

Responsibilities

• Conduct in-depth assessments of the management, operations, and technical security controls.
• Develop a plan to address vulnerabilities and monitor security of network systems.
• Develop security compliance processes and/or audits for external services (e.g., cloud providers).
• Review and analyze POAMs, SARs, SAPs.
• Provide RMF guidance to system engineers and program managers on assessment and risk matters.
• Review security requirements and configurations for DoD policy compliance.
• Participate in security assessment meetings with PMs, Cyber Team Lead, and ISSOs.

Skills

RMF experience

DoD cybersecurity

Vulnerability scanning

Risk guidance

Communication

Project management

Stakeholder engagement

IAM III

Education

Bachelor's degree in engineering or IT

Job description

KBR is seeking a Security Control Assessor Representative (SCAR) to join our cybersecurity team in the United States. The role focuses on RMF assessments, vulnerability management, and DoD-compliant security controls for complex defense systems.

The SCAR will conduct risk evaluations, develop remediation plans, and oversee independent audits for applications, networks, and cloud services. Travel about 25% is expected to support missions and audits.