Security Control Assessor

Leading security control assessments for high-priority projects, the full-time Security Control Assessor will evaluate security controls for advanced AI technologies while working in a hybrid environment based out of Arlington, VA. Key Responsibilities Execute formal SCA/R duties and lead security assessment efforts, establishing reusable security playbooks for AI deployment Evaluate technical control effectiveness across AWS infrastructure and DevSecOps pipelines, integrating security controls early in the development lifecycle Review and maintain assessment packages, including System Security Plans and Security Assessment Reports, tailored to rapid prototyping and AI systems Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP) 3-5+ years of experience in security control assessments or A&A/RMF activities for DoD or federal systems Solid understanding of core AWS cloud services and security controls within cloud-native environments Strong knowledge of NIST SP 800-53 and RMF, with experience writing core RMF artifacts