Security Control Assessor Representative (SCAR)

Dark Wolf is hiring in Ogden, Utah for a Security Controls Assessor Representative (SCAR). This position works with fellow SCARs, Security Controls Assessors (SCAs), Information System Security Managers (ISSM), Program Managers (PM), and Authorizing Official (AO) representatives to obtain and maintain Authority to Operate (ATO) approvals for various AFNWC weapon subsystems and supporting IT systems by adhering to the Risk Management Framework (RMF). This position is responsible for reviewing, assessing, and providing advice/recommendations to the SCA/AO throughout the RMF process for assigned programs. This is an on-site position on Hill Air Force Base. On-site presence is expected 5 days per week. Base salary estimates range from $130,000.00 - $180,000.00, commensurate on experience and technical skillset. Strictly direct, full-time W2 employees; no third-party staffing agencies, C2C, or 1099 independent contractors.

Responsibilities

Review, assess, and provide advice/recommendations to the SCA/AO throughout the RMF process for assigned programs; Obtain and maintain Authority to Operate (ATO) approvals for various AFNWC weapon subsystems and supporting IT systems by adhering to the Risk Management Framework (RMF); Work with SCARs, SCAs, ISSMs, Program Managers, and AO representatives

Requirements

10+ years of relevant work experience, including experience as an ISSO, ISSM, SCA, SCAR, or similar roles; Mastery of the NIST Risk Management Framework (RMF), including all seven steps and in-depth knowledge of NIST SP 800-53 security controls; Comprehensive technical understanding and practical experience with Windows/Linux OS hardening (including STIGs), network protocols (TCP/IP), firewall configurations, IDS/IPS, cloud security (FedRAMP, AWS/Azure GovCloud), virtualization, and database security; Hands-on experience with vulnerability scanning (ACAS/Tenable.sc/Nessus), configuration assessment (SCAP/STIG tools), and log analysis/SIEM platforms (e.g., Splunk, Elastic Stack); Expert-level knowledge of DoD/Agency-specific security requirements (e.g., DoDI 8500.01, CNSSI 1253), IAVMs, and STIG implementation/verification; Proven ability to develop and review System Security Plans (SSPs), write Security Assessment Reports (SARs), and manage Plans of Action and Milestones (POA&Ms); Strong capability in analyzing control effectiveness, identifying critical risks, and articulating residual risk to Authorizing Officials (AOs); A Bachelors degree in a relevant field or 3+ years of relevant experience in lieu of degree; US Citizenship and an active Top Secret security clearance with SCI eligibility