Security Control Assessor (SCA) / RMF Information Analyst

Delta Solutions & Strategies•Washington, DC

16d•Onsite

About The Position

Delta Solutions & Strategies is seeking a full-time Security Control Assessor (SCA) / RMF Information Analyst to support Headquarters United States Space Force (HQ USSF) S6 Cyber Governance and ATO/RMF initiatives at the Pentagon in Washington, DC. The role provides Advisory and Assistance Services (A&AS) to HQ USSF components, including the Chief of Space Operations (CSO), Chief Human Capital Office (CHCO), Deputy Chief of Space Operations for Cyber and Data (S6), and associated directorates. The position performs independent assessments of security controls for designated USSF systems, develops and reviews RMF documentation, verifies eMASS artifacts, and advises on system authorization readiness. It also supports continuous monitoring, security authorization boundaries and system categorization, and integration of DevSecOps and AI/ML assurance into RMF evidence collection. The analyst mentors junior staff and interfaces remotely and in person with Air Force and Space Force organizations.

Requirements

Bachelor’s degree; a Master’s degree is preferred.
At least 2 years of experience in cybersecurity, RMF compliance, or control assessment.
Familiarity with DoDI 8510.01, AFMAN 17-1303, and USSF RMF procedures for SCA roles.
Experience conducting control assessments at multiple classification levels (IL2–IL6, up to TS/SCI).
Experience authoring SAPs, SARs, and POA&Ms in eMASS.
DoD 8140/8570 baseline IA certification, such as CAP, CASP+, CISSP, or CISM, at IAM-II or IASAE-I level.
TS/SCI clearance required; Top Secret clearance with SCI eligibility is acceptable.

Nice To Haves

Prior experience supporting AO and SCA functions within DoD Components or Combatant Commands.
Proficiency with eMASS, ACAS, Nessus, STIG Viewer, XACTA, and other compliance tools.
Understanding of Zero Trust principles and architectures.
Knowledge of cross-domain solutions, boundary protection mechanisms, and secure data transfer protocols.
Understanding of space systems cybersecurity, DevSecOps, and mission resilience.
Excellent communication, analytical, and problem-solving skills.
Commitment to supporting the USSF mission and strengthening national security through effective cyber governance.

Responsibilities

Serve as Security Control Assessor or SCA-support lead for designated USSF systems, independently assessing implemented security controls and providing Security Assessment Reports (SARs) and recommendations to the Authorizing Official (AO).
Lead development and review of RMF documentation, including Security Assessment Plans (SAPs), SARs, Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms).
Evaluate compliance with NIST SP 800-53, CNSSI 1253, DoDI 8510.01, and USSF RMF governance, and verify eMASS artifacts for accuracy and completeness.
Coordinate with ISSOs, ISSMs, and System Owners to track corrective actions to closure and reflect them in POA&Ms.
Advise S6G Authorizing Official Designated Representatives (AODRs) on readiness for ATO, re-authorization, and continuous monitoring phases.
Support Security Authorization Boundary development, system categorization per ITCSC, and selection of Space, Privacy, and Mission-Specific overlays.
Contribute to Continuous Monitoring (CONMON) strategy and risk dashboards aligned with the DoD CIO Cybersecurity Risk Management Construct (Sep 2025).
Mentor junior analysts in control assessment methodology, artifact generation, and eMASS data entry.
Review and validate security documentation, including System Security Plans (SSPs), SARs, and POA&Ms.
Conduct information system assessments to ensure compliance with RMF, NIST, and DoD standards.
Integrate DevSecOps pipeline security controls and AI/ML assurance activities into RMF evidence collection to support rapid or continuous ATO (cATO) processes.
Interface remotely and in person with Air Force and Space Force organizations to advance cybersecurity, policy, and infrastructure readiness.