Offensive Security Control Assessor Security Control Assessor Representative

📋 Description

• Lead security control assessments across high-priority projects in fast-paced DevSecOps
• Evaluate security controls for AWS cloud, CI/CD pipelines, microservices, and GenAI/LLM stacks.
• Apply software design practices and run TEMs, Discovery & Framing workshops, and
• Act as primary SME for custom offensive tooling and integrate capabilities into a cohesive platform.
• Prepare SSPs, SAPs, SARs, and POA&Ms tailored to rapid prototyping and AI systems.
• Provide risk briefings and ATO recommendations with program managers and engineers.

🎯 Requirements

• Active Top Secret clearance.
• Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP
• 5–7+ years in security control assessments, A&A/RMF for DoD or federal systems.
• Strong AWS cloud services knowledge and security controls in cloud-native/CI/CD contexts.
• Experience with GitLab CI/CD and AWS services (EC2, VPC, IAM, S3).
• Knowledge of NIST SP 800-53, RMF, DoD Cloud Computing SRG, and FedRAMP baselines.

🎁 Benefits

• EEO/AA employer; supportive of minorities, women, veterans, and disabled.
• Compliance with federal employment eligibility requirements; US-based, full-time W2 role.