Senior Security Auditor – RMF/A&A & JWICS Connectivity

Pueo Business Solutions LLC; McLean (VA); On-site; USD 148,000 - 168,000; Full time

Job summary

Pueo seeks an experienced Security Auditor to join our multidisciplinary team onsite in McLean, VA. You will regularly interface with IC agency and DoD leadership to support JWICS connections and risk assessments.

The role requires hands-on RMF/A&A work, knowledge of STIGs, NIST RMF, and experience with scanning/GRC tools. Strong communication with CIO and stakeholders is essential.

A TS/SCI with CI poly and related degree with extensive experience is expected for this position.

Qualifications

• Active TS/SCI with CI poly; ability to obtain/maintain.
• Bachelor’s degree and 12+ years experience, or 16+ years without degree.
• IAT III certification per DoD 8570.01-M (e.g., CISSP, CASP+).
• Experience in SSP/SAR/POA&M/ATO ownership; NIST RMF fluency.
• Hands-on RMF/A&A experience relevant to Security Auditor.
• Familiarity with IC and DoD cybersecurity policies and STIGs.
• Ability to draft SOPs and manage ATC/CONMON/POA&M activities.
• Experience with scanning/GRC tools.

Responsibilities

• Lead ATC activities assessing JWICS customer connections.
• Prepare formal reports, briefs, and connection packages.
• Coordinate with CIO entities and stakeholders to meet requirements.
• Analyze ATC data to improve CONMON and POA&M processes.
• Draft cyber-profile assessments communicating connection risk.
• Collaborate with ATC stakeholders on risk communication.
• Plan, execute, and report ATC assessments with subscribers.
• Assist in preparing assessment deliverables (ATC docs, risk assessments).
• Present risk findings verbally and in writing.

Skills

RMF/A&A experience

DoD IC policies

Cybersecurity concepts

SOP drafting

Communication skills

ATC knowledge

Vulnerability assessment

GRC tools

Stakeholder engagement

Education

Bachelor's degree in related field

Tools

XACTA

eMASS

ACAS

STIGs

Job description

Pueo seeks an experienced Security Auditor to join our multidisciplinary team onsite in McLean, VA. You will regularly interface with IC agency and DoD leadership to support JWICS connections and risk assessments.

The role requires hands-on RMF/A&A work, knowledge of STIGs, NIST RMF, and experience with scanning/GRC tools. Strong communication with CIO and stakeholders is essential.

A TS/SCI with CI poly and related degree with extensive experience is expected for this position.