Security Control Assessor/Representative
Core
Conduct security control assessments, compliance testing, and A&A/RMF activities for DoD and federal information systems, with a focus on emerging AI/LLM technologies.
Role type
Senior Security Control Assessor/Representative (IC)
Builds
Security assessment packages (SSPs, SAPs, SARs, POA&Ms) and risk briefings for Authorizing Officials
Domain
US Federal Government / Cybersecurity / Cloud Security / AI/LLM Security
Deliverable
production ML models
Required skills
Security control assessment, RMF (NIST SP 800-37), AWS cloud services, NIST SP 800-53, GRC repositories (eMASS/XACTA), risk communication, AI/LLM security risks
Preferred skills
NIST AI Risk Management Framework, OWASP Top 10 for LLM, DoD Responsible AI Guidelines, secure design for AI agents, cloud-managed AI ecosystems, RAG pipeline security, LLM guardrails, cATO methodologies, Infrastructure as Code, container security, offensive security
Technologies
AWS, EC2, S3, IAM, VPC, Security Hub, Terraform, Docker, Kubernetes, OpenSearch, PostgreSQL, PyTorch, LangGraph
Responsibilities
Lead security assessments and create reusable playbooks for AI deployment; Evaluate technical control effectiveness across AWS infrastructure and GenAI stacks; Review and maintain RMF artifacts; Assess technical risks in AI/LLM implementations; Coordinate with Authorizing Officials to deliver risk briefings and ATO recommendations; Provide technical input for cybersecurity engineering and penetration testing activities
