Job Description
📋 Description Execute formal SCA/R duties. Lead security assessment efforts with reusable playbooks for rapid AI deployment. Evaluate security controls across AWS, CI/CD pipelines, microservices, containers, and GenAI/LLM stacks. Partner with security engineering and DevSecOps to embed security early in the SDLC. Review and maintain SSPs, SAPs, SARs, and POA&M for rapid AI prototyping. Assess AI/LLM security risks such as API exposure, vector DB controls, model integration, and supply chain. 🎯 Requirements Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or III certification (e.g., Security+, CySA+, CISM, CISSP) 3–5+ years of experience conducting security control assessments, A&A/RMF for DoD or federal systems Solid understanding of AWS core services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and security controls in cloud-native/CI/CD Strong knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud SRG, and FedRAMP baselines Experience writing and evaluating RMF artifacts (SSPs, SAPs, SARs, POA&M) 🎁 Benefits Hybrid/Remote work opportunities Direct, full-time W2 employment; no staffing agencies EEO/AA employer; commitment to diversity Compliance with federal employment eligibility verification
