RMF Security Control Assessor (Expert)

Description

Pueo is seeking an Expert Risk Management Framework (RMF) Security Control Assessor (SCA) to join our unique team of multidisciplined experts onsite in McLean, VA. 

The ideal candidate should possess basic knowledge of Zero Trust Framework.

The RMF SCA will be responsible for the following but not limited to: 

• Support the Assessment and Authorization (A&A) Risk Management Framework process for all client managed systems, networks, and enclaves (all security domains); ensure validity and accuracy review of all associated documentation; support remote sites when required. 
• Conducting a comprehensive assessment of the security controls employed within or inherited by an Information System (IS) to determine their overall effectiveness, and submits the Body of Evidence (BoE), composed of the System Security Plan (SSP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and draft Authorization to Operate (ATO) Letter, to the Authorizing Official (AO) or Delegated Authorizing Official (DAO) for review and authorization decision. 
• Advise key stakeholders, such as the Program Office, Data Owner and Authorizing Official/Delegated Authorizing Official concerning the security categorization and impact levels for confidentiality, integrity, and availability for the information on a system. 
• Advise ISSOs on categorization and selection of security controls (RMF steps 1 and 2) and conduct Technical Exchange Meetings (TEMs) where they collaborate with other security professionals. 
• Communicate finding impacts through presentations and written deliverables. 
• Stay up to date with the latest trends and technologies related to IC policy to continuously refine security inspection protocols. 

Requirements

Minimum Required Qualification:  

• Must have a current/active TS/SCI with the ability to obtain and maintain a CI Poly 
• Bachelor’s degree in related field and 12 years of experience, or an additional 4 years of experience in lieu of a completed degree for a total of 16+ years.   
• Must be able to obtain and maintain an IAT III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex; CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP). 
• Basic knowledge of Zero Trust Framework. 
• Expert knowledge and hands-on experience with RMF, NIST 800-series guidelines, FIPS, Security Assessment & Authorization (SA&A) requirements and processes.
• Expert experience with Continuous Monitoring Framework experience and its tools, Plan of Action & Milestones (POA&M) policies, and vulnerability/patch management. 
• Expert with documenting and or reviewing of security materials such as; system security plans (SSP), Security Assessment Report (SAR), and Security Assessment Plan (SAP), and other documents per NIST 800 guidelines. Basic knowledge of Zero Trust Framework. 
• Expert hands-on experience interpreting compliance and vulnerability scanning tool reports from (XACTA, STIGS, ACAS, PRISMA, Splunk, Trellix (HBSS), and/or other vulnerability scanners).
• Solid interpersonal and communication skills to interact with various stakeholders and team members effectively. 

Desired Qualifications:   

• An active Top Secret security clearance with   SCI eligibility and current CI poly.
• Current and valid IAT-III or IAT Level III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management 
• Some experience leading security projects and initiatives. 
• Team-player with collaboration qualities and experience working in mixed technical teams. 

SALARY RANGE ESTIMATE

Min $161,000 to $183,000. The estimate displayed represents the typical salary range for this position and is just one component of Pueo’s total compensation package for employees. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Pueo provides a variety of benefits to employees.

PUEO OVERVIEW

Pueo is a National Security cyber company built to inspect, defend, harden, and continuously authorize the networks our customers depend on. We deliver mission-grade cybersecurity across defense, intelligence, homeland security, federal enterprise, and critical infrastructure. Our work connects mission-risk inspection, defensive cyber operations, continuous authorization, security engineering, and mission delivery through one accountable team.

PUEO EEO STATEMENT

Pueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.