Offensive Security Control Assessor Security Control Assessor Representative

<p class="p1"><strong>Dark Wolf Solutions</strong> is seeking <strong>Security Control Assessor/Representatives (SCA/Rs)</strong> to&nbsp;lead security control assessments across high-priority projects. Working at the intersection of&nbsp;cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate&nbsp;security controls for cutting-edge AI/LLM technologies across multiple classification levels. This&nbsp;position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps&nbsp;environments, understands AWS cloud security, and is eager to shape the cybersecurity posture&nbsp;of next-generation DoD AI capabilities.This position will be based out of Arlington, VA with&nbsp;hybrid/remote opportunities. Additional responsibilities include:</p> <p class="p3"><strong>Key Responsibilities</strong></p> <ul> <li class="p2">Execute formal SCA/R duties.</li> <li class="p2">Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows.</li> <li class="p2">Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks.</li> <li class="p2">Bridge the gap between OffSec and development by applying software design best practices. Lead technical exchange meetings (TEMs), participate in Discovery &amp; Framing workshops, and maintain effective communication with cross-functional teams and stakeholders.</li> <li class="p2">Act as the primary subject matter expert and lead developer for custom offensive tooling, integrating disparate capabilities into a cohesive, mission-ready platform.</li> <li class="p2">Review, author, and maintain assessment packages—including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&amp;Ms—tailored to rapid prototyping and AI systems.</li> <li class="p2">Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies.</li> <li class="p2">Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments.</li> <li class="p2">Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations.</li> <li class="p2">Provide technical input and oversight for cybersecurity engineering and penetration testing activities