Security Control Assessor/Representatives
Core
Lead security control assessments for high-priority DoD AI/LLM projects, evaluating controls across AWS cloud infrastructure, DevSecOps pipelines, and GenAI application stacks.
Role type
Senior Security Control Assessor/Representative (SCA/R)
Builds
Security assessment frameworks, playbooks, and decision-ready risk briefings for rapid AI deployment into enterprise workflows.
Domain
Defense (DoD), Cloud Security, AI/LLM Security, DevSecOps
Deliverable
production ML models | dashboards & analysis | client delivery
Required skills
Security control assessment, RMF artifacts (SSP/SAP/SAR/POA&M), AWS cloud security, NIST SP 800-53/800-37, DoD Cloud SRG, FedRAMP, Top Secret clearance, IAM Level II/III certification
Preferred skills
NIST AI RMF mapping, OWASP Top 10 for LLMs, DoD RAI Guidelines, secure design for autonomous AI agents, cloud-managed AI ecosystems (Bedrock/SageMaker), RAG/vector database security, LLM risk evaluation (prompt injection/data poisoning), AI security tools (Promptfoo/Garak), IaC (Terraform), container security, penetration testing
Technologies
AWS (EC2, S3, IAM, VPC, Security Hub, EKS/ECS), Terraform, CloudFormation, Docker, OpenSearch Vector Engine, Pinecone, Milvus, PostgreSQL pgvector, PyTorch, LangChain, LlamaIndex, Promptfoo, Garak, Giskard, NeMo Guardrails
Responsibilities
Execute formal SCA/R duties; lead security assessment efforts establishing reusable playbooks; evaluate technical control effectiveness across AWS, DevSecOps, and GenAI stacks; partner with engineering teams to integrate controls early; review and maintain RMF artifacts; assess AI/LLM-specific risks (API exposure, vector DB access, supply chain); support continuous monitoring and cloud architecture reviews; coordinate with Authorizing Officials for ATO recommendations; provide oversight for cybersecurity engineering and penetration testing.
Seniority
Senior, hands-on IC