Top Secret/SCI Security Control Assessor (RMF/A&A)

Pueo Business Solutions LLC; Virginia (MN); On-site; USD 120,000 - 190,000; Full time

Job summary

Pueo is seeking a Security Control Assessor (SCA) to conduct comprehensive assessments of security controls within information systems, determine effectiveness, and prepare the Body of Evidence (BoE) including SSP, SAR, POA&M, and a draft ATO letter for AO/DAO review.

The SCA will engage with program offices, ISSOs, data owners, and authorizing officials to guide RMF categorization and assign confidentiality, integrity, and availability impact levels.

Qualifications

• Bachelor's degree or 16 years related experience in cybersecurity.
• Twelve (12) years of experience in cybersecurity RMF and A&A activities.
• IAT Level III certification per DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management requirements.
• Certifications include: CASP+ CE, CCNP Security, CISA, CISSP or CISSP Associate, GCED, GCIH, CCSP.

Responsibilities

• Conduct comprehensive assessments of security controls and determine their effectiveness and compliance.
• Develop and submit the complete BoE, including SSP, SAR, POA&M, and draft ATO letter for AO/DAO review.
• Advise stakeholders on RMF categorization and determining confidentiality, integrity, and availability impact levels.

Skills

Interpersonal communication

Vulnerability tools

Team collaboration

Education

Bachelor's degree in Cybersecurity/CS/IT

16 years related experience

Tools

Xacta

STIG Viewer

ACAS

Prisma

Splunk

Trellix HBSS

Vulnerability Scanners

Job description

Pueo is seeking a Security Control Assessor (SCA) to conduct comprehensive assessments of security controls within information systems, determine effectiveness, and prepare the Body of Evidence (BoE) including SSP, SAR, POA&M, and a draft ATO letter for AO/DAO review.

The SCA will engage with program offices, ISSOs, data owners, and authorizing officials to guide RMF categorization and assign confidentiality, integrity, and availability impact levels.