Senior RMF Security Controls Lead

Tharros; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision, and life/disb

Education reimbursement up to $5,250/年

Referral bonuses

Savings & retirement plan

Job summary

Tharros seeks a Senior Security Control Assessor to lead the most complex RMF assessments across CDS, SAP systems, C-LAN sites, and cloud environments on-site at a Government SCIF in Washington, DC.

You will mentor junior staff, help modernize assessment SOPs, and ensure ongoing authorization while complying with DHS/DOD requirements. A TS/SCI clearance and US citizenship are required.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 10 years' experience in IT or cybersecurity.
• Minimum of 7 years' experience in RMF security control assessment.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.
• Knowledge of ICD 503, CNSSI 1253, and the RMF.
• Knowledge of Cross Domain Solution or SAP system assessment requirements.
• Knowledge of cloud security authorization concepts.
• Skill in using at least two security tools (Nessus/ACAS, SCAP, WebInspect, SonarQube, STIG Viewer).
• Skill in developing and improving assessment procedures and SOPs.
• Ability to lead complex assessments and mentor junior staff.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.

Responsibilities

• Lead the most complex assessments in the portfolio, including Cross Domain Solutions (CDS), Special Access Program (SAP) systems, C-LAN extension sites, and cloud environments.
• Guide junior assessors, improve A&A standard operating procedures, and help modernize the authorization process toward ongoing authorization and reciprocity.
• This position is on-site in a Government SCIF in Washington, DC.

Skills

RMF security control assessment

Cross Domain Solutions

SAP system assessment

Cloud security concepts

Security tools usage

Leadership/mentoring

MS Office/Teams

Written and verbal communication

Education

BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

Nessus/ACAS

SCAP

WebInspect

SonarQube

STIG Viewer

Job description

Tharros seeks a Senior Security Control Assessor to lead the most complex RMF assessments across CDS, SAP systems, C-LAN sites, and cloud environments on-site at a Government SCIF in Washington, DC.

You will mentor junior staff, help modernize assessment SOPs, and ensure ongoing authorization while complying with DHS/DOD requirements. A TS/SCI clearance and US citizenship are required.