Cyber RMF Analyst — System Authorization & Assessments

Leidos; Ashburn (VA); On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

Health benefits

Paid leave

Retirement plan

Job summary

Leidos in Ashburn, VA is seeking an Assessment and Authorization Analyst to evaluate CBP information systems using RMF and related methodologies. You will assess security controls, document findings, and support authorization decisions.

The role requires a Bachelor’s or Master’s degree with substantial IT/security experience, US citizenship, and strong writing and analytical skills. You will work with cross‑functional teams to ensure compliant, secure deployments across the system lifecycle.

Qualifications

• Bachelor’s degree with 4–8 years in IT/Security or Master’s with 2+ years.
• US Citizenship required.
• 1–3 years ISSO experience with federal information systems.
• Strong writing, communication and analytical skills.
• Knowledge of NIST SP 800-37 and RMF.
• Willing to commute to Ashburn, VA up to 5 days/week.

Responsibilities

• Conduct formal assessments and determine whether the system is authorized to operate.
• Evaluate the system’s security posture and controls for effectiveness.
• Document results and provide recommendations for security improvements.
• Assist in creating System Security Plan, Security Assessment Report, and ATO.
• Coordinate security across lifecycle and various IT areas.

Skills

ISSO experience

NIST RMF

Security policies

Communication skills

Information Assurance

Ability to commute

Education

Bachelor’s degree

Master’s Degree

Job description

Leidos in Ashburn, VA is seeking an Assessment and Authorization Analyst to evaluate CBP information systems using RMF and related methodologies. You will assess security controls, document findings, and support authorization decisions.

The role requires a Bachelor’s or Master’s degree with substantial IT/security experience, US citizenship, and strong writing and analytical skills. You will work with cross‑functional teams to ensure compliant, secure deployments across the system lifecycle.