DoD Cyber Security Analyst - RMF/ATO Lead (OneStream)

Andrew Morgan Consulting LLC; United States; Remote; USD 140,000 - 155,000; Full time

Benefits offered by this job

PTO 15 days + 11 holidays

401K with employer match

Healthcare options

Flexible Spending Account

Life Insurance

Disability Insurance

Training and Development

Team Building Events

Job summary

Andrew Morgan LLC is seeking a Cyber Security Analyst (Federal OneStream Support) to own the security compliance lifecycle for a cloud-based OneStream platform. You will author policies, develop SSPs, and coordinate with officials to obtain and sustain ATO while aligning with NIST, DoD, and FedRAMP requirements.

The role requires hands-on policy writing, documentation, and liaison with government stakeholders. Strong communication and experience with RMF/A-ATO processes are essential.

Qualifications

• U.S. citizenship is required for federal work.
• At least five years of cybersecurity experience, with three in federal information systems.
• Ability to sustain ATO packages under NIST RMF.
• Experience with NIST SP 800-53/800-37/800-171 and FISMA guidance.

Responsibilities

• Lead the full RMF lifecycle (NIST SP 800-37) for OneStream systems.
• Develop and maintain the ATO package and SSP.
• Map NIST controls including FedRAMP-derived controls.
• Coordinate with SCAs, ISSMs, and AOs to drive authorization.
• Manage artifacts and workflows in the GRC tool.
• Author and update security policies and SOPs.
• Document access control and data handling procedures.
• Ensure alignment with DoD 8510.01, DISA STIGs/SRGs, and A-130/A-123 guidance.
• Track and remediate vulnerabilities and POA&M items with teams.
• Conduct periodic access reviews and security role audits.
• Assess security impact of changes and integrations.
• Support annual assessments and reauthorizations.
• Collaborate with OneStream teams to validate security models.

Skills

U.S. citizenship

NIST RMF knowledge

Written communications

Security policy writing

Vulnerability remediation coordination

Education

Bachelor's degree in cybersecurity or related field

IAM baseline certification (DoD 8140/8570) or ability to obtain within 90 days

Tools

GRC tools

Job description

Andrew Morgan LLC is seeking a Cyber Security Analyst (Federal OneStream Support) to own the security compliance lifecycle for a cloud-based OneStream platform. You will author policies, develop SSPs, and coordinate with officials to obtain and sustain ATO while aligning with NIST, DoD, and FedRAMP requirements.

The role requires hands-on policy writing, documentation, and liaison with government stakeholders. Strong communication and experience with RMF/A-ATO processes are essential.