Senior Security Controls Assessor (RMF/A&A)

AGE Solutions; United States; Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

26 Days Paid Leave

Performance Bonuses

401(k) with Match

Health Benefits

Job summary

AGE Solutions is seeking a Security Control Assessor Representative (SCA-R) to provide cybersecurity assessment, RMF, and A&A support for DoD information systems across the lifecycle. You will work with ISSMs, PMOs, system owners, and technical teams to assess controls, identify risks, and prepare authorization documentation.

Requirements include a DoD Secret clearance (Top Secret with SCI eligibility preferred), DoD 8570 IAM Level III, and 8+ years in cybersecurity with 5+ years in C&A/A&A

Qualifications

• Bachelor's degree required; information technology/cybersecurity field preferred.
• Minimum 8 years in cybersecurity or network security.
• Minimum 5 years in C&A/A&A activities.
• DoD Secret clearance required; Top Secret with SCI eligibility strongly preferred.
• Current DoD 8570 IAM Level III certification.
• Demonstrated RMF/ risk analysis and security controls experience.

Responsibilities

• Perform weekly updates using Government tools and maintain system records.
• Coordinate with ISSMs, PMOs, system owners, and stakeholders on security requirements and boundaries.
• Conduct risk analysis, security control assessment, and RMF activities with approved tools.
• Validate security categorizations in line with FIPS 199 and DoD requirements.
• Prepare complete authorization packages for AO review.
• Lead on-site assessment visits and produce findings and reports.

Skills

RMF knowledge

NIST SP 800-37/800-53

Risk analysis

C&A/A&A experience

Stakeholder communication

Education

Bachelor's degree in IT/Cybersecurity

Tools

eMASS

STIG Viewer

Nessus

ACAS

SCAP

HBSS/ESS

Job description

AGE Solutions is seeking a Security Control Assessor Representative (SCA-R) to provide cybersecurity assessment, RMF, and A&A support for DoD information systems across the lifecycle. You will work with ISSMs, PMOs, system owners, and technical teams to assess controls, identify risks, and prepare authorization documentation.

Requirements include a DoD Secret clearance (Top Secret with SCI eligibility preferred), DoD 8570 IAM Level III, and 8+ years in cybersecurity with 5+ years in C&A/A&A