RMF & ATO Security Analyst

Socket.dev; Bethesda (MD); On-site; USD 115,000 - 126,000; Full time

Benefits offered by this job

PTO

401(k) Plan

Healthcare coverage

Job summary

DLH Corporation seeks a Security Assessment & Authorization Analyst to develop and maintain Authority to Operate (ATO) security packages and RMF artifacts for assigned systems.

You will collaborate across teams to assess controls, document security posture, manage POA&Ms, and help clients achieve successful authorization while ensuring compliance with NIST 800-53 and related standards.

Qualifications

• Minimum of five years developing and maintaining ATO security packages and assisting customers with RMF and the ATO lifecycle.
• Experience producing clear, concise documentation describing system configuration, operations, and security controls.
• Familiarity with security tools such as Tenable, Splunk, and GRC JCAM.
• Working knowledge of Federal security guidelines and control frameworks (e.g., NIST SP 800-53).
• Relevant certifications (e.g., CGRC/CAP, CISA, CompTIA Security+, CISSP) required.

Responsibilities

• Develop and maintain ATO security packages and authorization documentation.
• Assess security controls to ensure NIST 800-53 compliance.
• Support RMF lifecycle and customer engagements for Authority to Operate packages.
• Develop, manage, and update Plans of Action & Milestones (POA&Ms).
• Analyze STIG and SCAP requirements for document compliance.
• Track vulnerabilities through remediation and risk acceptance.
• Evaluate environmental and configuration changes impacting security posture.

Skills

ATO development

RMF lifecycle

Security documentation

Security controls

Cross-team collaboration

Public Trust clearance

Education

Bachelor's degree in IT or Cybersecurity

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH Corporation seeks a Security Assessment & Authorization Analyst to develop and maintain Authority to Operate (ATO) security packages and RMF artifacts for assigned systems.

You will collaborate across teams to assess controls, document security posture, manage POA&Ms, and help clients achieve successful authorization while ensuring compliance with NIST 800-53 and related standards.