FISMA & RMF Security Analyst - Onsite in DC

Edgewater Federal Solutions; Washington (District of Columbia); On-site; USD 133,000 - 136,000; Full time

Benefits offered by this job

Paid Time Off

Medical Insurance

Dental Insurance

Vision Insurance

Disability, Life Insurance, and AD&D

401K match

Tuition & Technical Training

Travel Reimbursement

Job summary

Edgewater Federal Solutions in Washington, DC seeks a FISMA Support Analyst to join the GRC team within the IT division. The role emphasizes security authorization, risk management, and compliance for federal systems.

Responsibilities include RMF/ATO processes, SSPs, POA&Ms, vulnerability analysis, and security reporting for auditors during a 9/14/26–12/31/26 period, with potential extension. On-site at the DC facility; some travel possible.

Qualifications

• U.S. Citizenship required.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Three to five years of information security or cybersecurity compliance experience.
• Experience with federal government systems and FISMA compliance.

Responsibilities

• Manage the security authorization lifecycle for information systems under NIST RMF (SP 800-37).
• Prepare and maintain security authorization packages, including SSPs, SARs, and POA&Ms.
• Conduct continuous monitoring activities and maintain Authority to Operate status.
• Ensure compliance with FISMA, NIST SP 800-53 security controls, and agency policies.
• Perform security control assessments, vulnerability analyses, and risk assessments.
• Develop and maintain Plans of Action and Milestones; track deficiencies.
• Coordinate security scans and incident response activities.
• Generate security metrics and reports for management and auditors.

Skills

NIST 800-53

NIST 800-37

NIST 800-171

Nessus

ACAS

SCAP

FedRAMP

RMF

ATO

Xacta

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Security assessment tools

Job description

Edgewater Federal Solutions in Washington, DC seeks a FISMA Support Analyst to join the GRC team within the IT division. The role emphasizes security authorization, risk management, and compliance for federal systems.

Responsibilities include RMF/ATO processes, SSPs, POA&Ms, vulnerability analysis, and security reporting for auditors during a 9/14/26–12/31/26 period, with potential extension. On-site at the DC facility; some travel possible.