Spry Methods
Senior Cloud Security Assessor
Washington, DC (Hybrid) · Hybrid · Senior · Full-time · Posted Sep 11, 2026
- Experience
- At least eight years; alternatively, the education requirement may be met with eight additional years of relevant specialized experience.
- Education
- Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or eight additional years of relevant specialized experience.
About the job
Leads independent, evidence-based security assessments of federal cloud, hybrid, and enterprise systems, evaluating controls, risk, and mitigation options.
What you'll do
- Lead full-cycle Security Assessment and Authorization activities; assess security controls in Microsoft Azure and AWS environments.
- Analyze FedRAMP authorization packages and technical evidence, validate vulnerabilities, and develop assessment plans, reports, and POA&Ms.
- Communicate defensible findings and mitigation options, coordinate assessment activities, and support consistent assessment methods and quality reviews.
What they ask for
- Active CISSP certification.
- At least eight years of hands-on security control assessment experience, including substantial independent assessment experience for cloud and hybrid systems.
- Experience assessing federal systems hosted in Microsoft Azure and AWS and analyzing FedRAMP packages and artifacts.
- Knowledge of federal RMF and NIST assessment practices; experience with CSAM or a comparable GRC platform.
Nice to have
- CCSK, CCSP, CGRC, or comparable cloud or assessment certification.
- Experience with federal cybersecurity programs, FedRAMP control inheritance, DoD 8570/8140 IAM Level II eligibility, or privacy and data protection assessments.
Tools
Microsoft Azure, Amazon Web Services (AWS), FedRAMP, CSAM, NIST, RMF, POA&Ms
Model-written summary · the original posting is authoritative