Senior RMF Security Controls Lead – ATO & Assessments

Dark Wolf Solutions, LLC; Ogden (UT); On-site; USD 130,000 - 180,000; Full time

Job summary

Dark Wolf Solutions, LLC is seeking a highly experienced Security Controls Assessor Representative (SCAR) for an on-site role at Hill Air Force Base in Ogden, Utah. You will work with SCARs, SCA, ISSM, PM, and AO representatives to obtain and maintain ATOs for AFNWC weapon subsystems and IT systems within the RMF framework.

The position requires deep RMF knowledge, strong C&A documentation skills (SSPs/SARs/POA&Ms), and hands-on experience with vulnerability scanning, STIGs, and log analysis

Qualifications

• Masters of RMF knowledge and seven-step RMF process
• In-depth knowledge of DoD/NIST 800-53 controls and their application
• Experience with Windows/Linux hardening, network protocols, firewalls, IDS/IPS
• Hands-on with vulnerability scanning tools (ACAS/Nessus/Tenable) and log analysis tools
• Ability to develop and review SSPs, SARs, and POA&Ms
• Active Top Secret clearance with SCI eligibility, US Citizenship

Responsibilities

• Review, assess, and advise on RMF for assigned programs
• Participate with SCA/AO to obtain/maintain ATOs for subsystems
• Develop and review System Security Plans (SSPs) and SARs
• Manage Plans of Action and Milestones (POA&Ms) and track remediation
• Analyze control effectiveness and communicate residual risk to AOs
• Collaborate with ISSOs, ISSMs, PMs and AO representatives

Skills

RMF mastery

NIST SP 800-53

Vulnerability assessment

SSP/SAR development

DoD security requirements

Education

Bachelor's degree or 3+ years experience

Tools

ACAS/Tenable.sc/Nessus

SCAP/STIG tools

Splunk/Elastic Stack

Job description

Dark Wolf Solutions, LLC is seeking a highly experienced Security Controls Assessor Representative (SCAR) for an on-site role at Hill Air Force Base in Ogden, Utah. You will work with SCARs, SCA, ISSM, PM, and AO representatives to obtain and maintain ATOs for AFNWC weapon subsystems and IT systems within the RMF framework.

The position requires deep RMF knowledge, strong C&A documentation skills (SSPs/SARs/POA&Ms), and hands-on experience with vulnerability scanning, STIGs, and log analysis