RMF & ATO Security Analyst

DLH Corporation; Bethesda (MD); On-site; USD 102,000 - 115,000; Full time

Benefits offered by this job

PTO

Medical insurance

401(k) matching

Education assistance

Job summary

DLH Corporation is seeking a Security Assessment & Authorization Analyst to join our team in the United States. You will develop and maintain Authority to Operate (ATO) documentation and work across the RMF lifecycle for assigned systems.

The role requires three+ years of RMF/ATO experience, knowledge of NIST SP 800-53 controls, and cloud security (FedRAMP preferred). You will collaborate with diverse teams to address cybersecurity challenges and support government programs.

Qualifications

• Bachelor's degree in information technology, cybersecurity, or related field.
• 3+ years developing and maintaining ATO security packages and RMF lifecycle.
• Experience documenting system configurations and security controls.
• FedRAMP experience preferred in a large government environment.
• Experience with cloud security (AWS, Azure, GCP) and RMF processes.

Responsibilities

• Support the development and maintenance of ATO security packages and authorization documentation.
• Assess security controls for NIST 800-53 compliance.
• Develop, manage, and update POA&Ms.
• Analyze STIG and SCAP requirements for document compliance.
• Track vulnerabilities through remediation and risk acceptance.
• Evaluate changes to determine impacts on security posture.
• Recommend mitigating controls and countermeasures.
• Demonstrate strong knowledge of security standards and practices.
• Show excellent problem-solving and analytical skills.
• Collaborate across diverse audiences and stakeholders.

Skills

RMF knowledge

Documentation

Cross-team collaboration

Security standards

Education

Bachelor's degree in IT / Cybersecurity

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH Corporation is seeking a Security Assessment & Authorization Analyst to join our team in the United States. You will develop and maintain Authority to Operate (ATO) documentation and work across the RMF lifecycle for assigned systems.

The role requires three+ years of RMF/ATO experience, knowledge of NIST SP 800-53 controls, and cloud security (FedRAMP preferred). You will collaborate with diverse teams to address cybersecurity challenges and support government programs.