Control Validation Security Specialist

Join to apply for the Control Validation Security Specialist role at Avum Inc.

Avum is seeking an experienced Control Validation Security Analyst to perform comprehensive security audits and control validation activities for complex information systems supporting Federal and Department of Defense (DoD) operations. This role conducts rigorous security evaluations, vulnerability assessments, and control effectiveness testing to ensure compliance with DoD contracting system requirements and Federal cybersecurity standards. The position specializes in security control validation, ensuring implemented safeguards are operating as intended and align with both mission requirements and risk tolerance.

The analyst supports the Risk Management Framework (RMF) lifecycle for cloud-hosted Government systems handling sensitive contracting data, balancing security mitigations against business and operational needs.

• Execute comprehensive IT security audits on complex systems in accordance with DoD and Federal requirements.
• Perform security control validation to verify proper implementation and effectiveness of technical, operational, and management controls.
• Conduct vulnerability assessments and analyze findings to identify security gaps and risks.
• Support RMF activities including control selection, implementation validation, assessment, and authorization support.
• Evaluate applied security mitigations to determine alignment with security requirements and business objectives.
• Validate project security controls to ensure compliance with DoD contracting system standards.
• Document security findings, risk assessments, and remediation recommendations.
• Maintain and update RMF artifacts and assessment results within eMASS.
• Collaborate with system owners, engineers, and stakeholders to resolve security issues and implement corrective actions.
• Support audits, inspections, and compliance reviews while ensuring accuracy and quality of deliverables.

• US Citizenship with the ability to obtain and maintain a US Government Clearance.
• Minimum of two (2) years of experience working with DoDI 8500.2 and/or NIST SP 800-53, with demonstrated understanding of the Risk Management Framework (RMF).
• Strong analytical and problem‑solving skills to identify, evaluate, and resolve security issues.
• Strong skills implementing and configuring networks and network components.
• Working knowledge of Enterprise Mission Assurance Support Service (eMASS).
• Understanding of how to weigh business and mission needs against security risks.
• Experience analyzing applied mitigations to determine whether they meet security requirements.
• Demonstrated knowledge of Risk Management Framework (RMF) concepts and processes.

• Experience supporting cloud‑hosted Government systems (AWS Gov Cloud, Azure Government, etc.).
• Familiarity with DoD contracting or acquisition‑related systems.
• Experience supporting ATO packages, continuous monitoring, and security assessments.
• Strong documentation and communication skills for both technical and non‑technical audiences.

• Being part of a remote‑first environment that rewards dedication and innovation.
• Receiving competitive compensation and benefits package that includes bonuses and 401K with 6% matching that vest immediately.
• Joining a mission‑driven technically forward team.

This role is fully remote. The candidate must be available during core Eastern Standard Time (EST) hours, Monday through Friday, and may need to travel for occasional in‑person meetings.

Avum, Inc. is a certified Small Disadvantaged Business who provides advanced software, database, and business intelligence systems to the DoD/Military, Intelligence Community, and Federal, State, Local and Commercial clients since 1991. We manage technical programs and projects and provide strategic guidance to support our customer's system engineering efforts. We provide sustainment in mission‑critical and secure environments. We support information assurance activities and accreditation for the systems we deploy.

Our engineers conduct rapid prototyping and Agile customer‑focused…