Federal Security Analyst: FedRAMP, RMF & ATO Prep

imagineeer LLC; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

Imagineeer is seeking a Security Analyst to support security assessment and authorization readiness for commercial acquisition tools piloted by a federal civilian department. You will assist in testing controls and compiling authorization documentation.

The role requires 7+ years in information security, with FedRAMP/RMF/NIST SP 800-53 knowledge, and ability to obtain a PIV credential. On-site work in Washington, DC is expected.

Qualifications

• Bachelor's degree in cybersecurity, information systems, or a related field.
• 7+ years of information security experience, including federal assessment and authorization work.
• Working knowledge of NIST SP 800-53, the RMF, and FedRAMP documentation.
• Experience with vulnerability scanning and control testing tools.
• Security+, CGRC (formerly CAP), CISSP, or equivalent certification.
• Ability to pass the client's contractor security vetting and obtain and maintain a PIV credential; this role may carry a higher position risk designation.

Responsibilities

• Develop security requirements with the Security Assessor/ATO Lead.
• Review vendor FedRAMP packages and document inherited and customer-responsibility controls.
• Perform control and vulnerability testing in the contractor sandbox.
• Prepare authorization documentation for each piloted tool.
• Work with the contractor-provided sandbox in a FedRAMP-authorized cloud region, with mock AMS/PRISM, FPDS-NG, and SAM.gov interfaces and synthetic data
• Vulnerability scanning and configuration compliance tools

Skills

Information security experience

FedRAMP familiarity

RMF knowledge

NIST SP 800-53 knowledge

Vulnerability testing

Education

Bachelor's degree in cybersecurity or related field

Tools

Vulnerability scanning tools

Security testing tools

FedRAMP documentation tools

Job description

Imagineeer is seeking a Security Analyst to support security assessment and authorization readiness for commercial acquisition tools piloted by a federal civilian department. You will assist in testing controls and compiling authorization documentation.

The role requires 7+ years in information security, with FedRAMP/RMF/NIST SP 800-53 knowledge, and ability to obtain a PIV credential. On-site work in Washington, DC is expected.