FISMA & RMF Security Analyst – Onsite in DC

Socket.dev; Washington (District of Columbia); On-site; USD 133,000 - 136,000; Full time

Benefits offered by this job

Paid Time Off & Holiday Pay

Medical Insurance

Dental Insurance

Vision Insurance

Disability, Life Insurance, and AD&D

401K & Roth IRA (employer matching)

Tuition and Technical Training Reimb.

Exercise Reimbursement

Computer Reimbursement

Employee Assistance Program

Job summary

Edgewater Federal Solutions is seeking a FISMA Support Analyst to assist the GRC team for the Board of Governors of the Federal Reserve. This onsite role in Washington, DC requires security expertise, RMF/ATO experience, and collaboration with government stakeholders.

The analyst will manage security authorization, monitoring, and reporting, while supporting risk assessments and security operations. Period of performance runs 9/14/26–12/31/26 with potential extension.

Qualifications

• Three to five years of information security or cybersecurity compliance experience.
• Experience with federal government systems and FISMA compliance.

Responsibilities

• Manage the security authorization lifecycle for information systems under NIST RMF (SP 800-37).
• Prepare and maintain security authorization packages, including SSPs, SARs, and POA&Ms.
• Conduct continuous monitoring activities and maintain Authority to Operate status.
• Ensure compliance with FISMA, NIST SP 800-53 security controls, and agency policies.
• Develop and maintain SSPs and security-related documentation.
• Coordinate security scans and vulnerability analyses; support incident response and investigations.

Skills

Security monitoring

Incident response

Risk assessment

Education

Bachelor’s degree in Computer Science, Information Security, or a related field

Tools

Nessus

ACAS

SCAP

Xacta

RMF

ATO

Job description

Edgewater Federal Solutions is seeking a FISMA Support Analyst to assist the GRC team for the Board of Governors of the Federal Reserve. This onsite role in Washington, DC requires security expertise, RMF/ATO experience, and collaboration with government stakeholders.

The analyst will manage security authorization, monitoring, and reporting, while supporting risk assessments and security operations. Period of performance runs 9/14/26–12/31/26 with potential extension.