Skip to content

Open nowPosted 49 days ago

Senior Security Control Assessor Representative (SCAR)

Dark Wolf Solutions73 open roles

Pay
$140,000 – $150,000 a year
Where
Dark Wolf Office Location
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security Control Assessor Representative (SCAR)Dark Wolf Solutions · Dark Wolf Office Location
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Dark Wolf Solutions's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.1% of postings close within 7 days. Measured by our own scanner across the market. Dark Wolf Solutions postings stay open a median of 20 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.1%7 days
  4. 21.1%14 days
  5. 35.8%30 days
  6. 59.0%60 days
This job: posted 49 days ago

Dark Wolf Solutions median: 20 days open

The posting

Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include:

Key Responsibilities:

  • Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements
  • Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance
  • Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates
  • Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls
  • Reviewing risk and control matrices and testing plans for key controls and determines effectiveness
  • Identifying control gaps, reviewing and testing the design of existing controls.
  • Formulating clear and concise conclusions on internal controls and business process efficiency
  • Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data
  • Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs
  • Reviewing Plans of Actions & Milestones (POA&Ms)
  • Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO)
  • Reviewing network and systems design to ensure accuracy
  • Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services

Required Qualifications:

  • 5+ years of relevant Cyber experience
  • 5+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer
  • Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP
  • Hands-on eMASS and/or Xacta experience completing full system lifecycle activities
  • Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101
  • Experience with Cloud Computing Security Requirements Guide (CC SRG)
  • Knowledgeable with DoD DevSecOps Fundamentals Playbook
  • Experience evaluating information security compliance against STIGs
  • Ability to clearly articulate ideas
  • Strong technical writing abilities to author reports for AO and CISO dissemination
  • Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders
  • Ability to use prior experience and knowledge to address new situations
  • Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+
  • B.A. or B.S. Information Security, Computer Science or related discipline
  • US Citizenship and currently possess a Top Secret security clearance

Desired Qualifications:

  • Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook
  • Familiarity with CI/CD Pipelines
  • DevSecOps experience
  • Sharepoint, JIRA, Confluence familiarity

The salary range for this position is $140,000.00 - $170,000.00 commensurate on experience and technical skillset.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Dark Wolf Solutions's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Dark Wolf Solutions's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Dark Wolf Solutions's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.