Security Control Assessor Representative (SCAR)

Dark Wolf Solutions

Ogden, UT

On-site

Who this role is best for

Geared toward seasoned security professionals comfortable with RMF process execution and compliance reporting, with a focus on on-site work in a government contracting domain.

Best fit for

Candidates with 10+ years of security compliance experience and a background in DoD systems.
— “10+ years of relevant work experience, including experience as an ISSO, ISSM, SCA, SCAR, or similar roles.”
Individuals with hands-on technical skills in system hardening and vulnerability assessment.
— “Hands-on experience with vulnerability scanning (ACAS/Tenable.sc/Nessus), configuration assessment (SCAP/STIG tools), and log analysis/SIEM platforms (e.g., Splunk, Elastic Stack) to identify and evaluate security posture.”
Professionals who can translate complex security requirements into clear risk narratives for leadership.
— “Strong capability in analyzing control effectiveness, identifying critical risks, and articulating residual risk to Authorizing Officials (AOs).”

Things to consider

On-site presence is mandatory, with no remote flexibility implied.
— “This position is responsible for reviewing, assessing, and providing advice/recommendations to the SCA/AO throughout the RMF process for assigned programs.”
Candidates must be US citizens with a Top Secret clearance and SCI eligibility.
— “US Citizenship and an active Top Secret security clearance with SCI eligibility.”

How to stand out

Highlight experience in developing and managing POA&Ms in your resume and interview responses.
— “Proven ability to develop and review System Security Plans (SSPs), write comprehensive Security Assessment Reports (SARs), and manage Plans of Action and Milestones (POA&Ms).”
Demonstrate familiarity with FedRAMP and cloud security frameworks in your application materials.
— “Comprehensive technical understanding and practical experience with ... cloud security (FedRAMP, AWS/Azure GovCloud).”
Emphasize your ability to work within a collaborative team structure involving ISSMs and SCAs.
— “This position works with fellow SCARs, Security Controls Assessors (SCAs), Information System Security Managers (ISSM), Program Managers (PM), and Authorizing Official (AO) representatives.”

Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

obtain and maintain Authority to Operate (ATO) approvals
review, assess, and provide advice/recommendations to the SCA/AO throughout the RMF process
develop and review System Security Plans (SSPs)
write comprehensive Security Assessment Reports (SARs)
manage Plans of Action and Milestones (POA&Ms)

Typical background

10+ years of relevant work experienceMastery of the NIST Risk Management Framework (RMF)US Citizenship and an active Top Secret security clearance with SCI eligibility

Skills & requirements

Required

Risk Management Framework (rmf)NIST SP 800-53 Security ControlsWindows/linux OS HardeningNetwork ProtocolsFirewall ConfigurationsVulnerability ScanningConfiguration AssessmentLog AnalysisDod/agency-specific Security RequirementsSystem Security Plans (ssps)Security Assessment Reports (sars)Plans Of Action And Milestones (poa&ms)

Preferred

Cloud SecurityVirtualizationDatabase Security

Stack & domain

NIST Risk Management Framework (rmf)Windows/linux OS HardeningNetwork ProtocolsFirewall ConfigurationsIds/ipsCloud SecurityVirtualizationDatabase SecurityVulnerability ScanningConfiguration AssessmentLog AnalysisSystem Security Plans (ssps)Security Assessment Reports (sars)Plans Of Action And Milestones (poa&ms)Analyzing Control EffectivenessIdentifying Critical RisksArticulating Residual RiskDodAgency-specific Security RequirementsIavmsSTIG Implementation/verification

About the role

Original posting from Dark Wolf Solutions via Greenhouse

Dark Wolf is hiring in Ogden, Utah for a Security Controls Assessor Representative (SCAR). This position works with fellow SCARs, Security Controls Assessors (SCAs), Information System Security Managers (ISSM), Program Managers (PM), and Authorizing Official (AO) representatives to obtain and maintain Authority toOperate (ATO) approvals for various AFNWC weapon subsystems and supporting IT systems by adhering to the Risk Management Framework (RMF). This position is responsible for reviewing, assessing, and providing advice/recommendations to the SCA/AO throughout the RMF process for assigned programs. This is an on-site position on Hill Air Force Base.
Required Qualifications:
10+ years of relevant work experience, including experience as an ISSO, ISSM, SCA, SCAR, or similar roles.
Mastery of the NIST Risk Management Framework (RMF), including all seven steps and in-depth knowledge of NIST SP 800-53 security controls and their application to complex government information systems.
Comprehensive technical understanding and practical experience with Windows/Linux OS hardening (including STIGs), network protocols (TCP/IP), firewall configurations, IDS/IPS, cloud security (FedRAMP, AWS/Azure GovCloud), virtualization, and database security.
Hands-on experience with vulnerability scanning (ACAS/Tenable.sc/Nessus), configuration assessment (SCAP/STIG tools), and log analysis/SIEM platforms (e.g., Splunk, Elastic Stack) to identify and evaluate security posture. Expert-level knowledge of DoD/Agency-specific security requirements (e.g., DoDI 8500.01, CNSSI 1253), IAVMs, and STIG implementation/verification.
Proven ability to develop and review System Security Plans (SSPs), write comprehensive Security Assessment Reports (SARs), and manage Plans of Action and Milestones (POA&Ms).
Strong capability in analyzing control effectiveness, identifying critical risks, and articulating residual risk to Authorizing Officials (AOs).
A Bachelors degree in a relevant field or 3+ years of relevant experience in lieu of degree.
US Citizenship and an active Top Secret security clearance with SCI eligibility.
This location is located on Hill AFB in Ogden, Utah. On-site presence is expected 5 days per week. We are hiring for multiple levels, with base salary estimates ranging from $130,000.00 - $180,000.00, commensurate on experience and technical skillset.
We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.
We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.
In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Source: Dark Wolf Solutions careers (Greenhouse)