Security Control Assessor/Representatives

📋 Description

• Execute formal SCA/R duties.
• Lead security assessment efforts with reusable playbooks for rapid AI deployment.
• Evaluate security controls across AWS, CI/CD pipelines, microservices, containers, and GenAI/LLM stacks.
• Partner with security engineering and DevSecOps to embed security early in the SDLC.
• Review and maintain SSPs, SAPs, SARs, and POA&M for rapid AI prototyping.
• Assess AI/LLM security risks such as API exposure, vector DB controls, model integration, and supply chain.

🎯 Requirements

• Active Top Secret security clearance
• Current DoD 8570/8140 IAM Level II or III certification (e.g., Security+, CySA+, CISM, CISSP)
• 3–5+ years of experience conducting security control assessments, A&A/RMF for DoD or federal systems
• Solid understanding of AWS core services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and security controls in cloud-native/CI/CD
• Strong knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud SRG, and FedRAMP baselines
• Experience writing and evaluating RMF artifacts (SSPs, SAPs, SARs, POA&M)

🎁 Benefits

• Hybrid/Remote work opportunities
• Direct, full-time W2 employment; no staffing agencies
• EEO/AA employer; commitment to diversity
• Compliance with federal employment eligibility verification