90% remote role based in Crystal City, VA area. Candidate must hold an active Top Secret clearance and Security+ plus at least one of CISM/CRISC/CISSP. Responsibilities include operating eMASS/SNAP/PPSM/STIG Viewer, developing SSPs, SARs, and POA&Ms, evaluating security controls for IaaS/PaaS offerings, conducting risk assessments per NIST/DISA/FISMA/FIPS, and using cloud and vulnerability scanning/monitoring tools across AWS, Azure, and GCP.