RMF & ATO Security Analyst II

DHL Holdings Corp; Austin (TX); On-site; USD 102,000 - 115,000; Full time

Benefits offered by this job

401(k) Retirement Plan

PTO

Job summary

DLH Corp is seeking a Security Assessment & Authorization Analyst to develop Authority to Operate (ATO) security packages and documentation across the RMF lifecycle. You will work with customers to understand technologies, assess vulnerabilities, document security controls, and manage POA&Ms to move solutions through authorization.

The ideal candidate has 3+ years in ATO/RMF, cloud security experience (AWS/Azure/GCP), and relevant certifications. A Public Trust clearance is required.

Qualifications

• Bachelor’s degree in information technology, cybersecurity, or a related field.
• Minimum of three (3) years of experience in developing and maintaining ATO security packages and helping customers with the RMF and ATO lifecycle.
• Experience developing clear, concise documentation describing system configuration, operations, and security controls.
• Prior experience with Cloud Security (AWS, Azure, GCP) within a large government environment (FedRAMP certified) preferred.
• Prior experience with the RMF lifecycle and supporting customers to obtain Authority to Operate security packages.
• Prior experience working with security tools such as Tenable, Splunk, and GRC JCAM.
• Working knowledge of Federal security guidelines, standards, and control frameworks (such as NIST SP 800-53).
• Relevant certifications (e.g., CGRC (CAP), CISA, CompTIA Security+, CISSP) required.
• Must be able to obtain a Public Trust clearance.

Responsibilities

• Support the development and maintenance of ATO security packages and authorization documentation.
• Assess security controls to ensure compliance with NIST 800-53 requirements.
• Develop, manage, and update Plans of Action & Milestones (POA&Ms).
• Analyze STIG and SCAP requirements to ensure document compliance.
• Track vulnerabilities through remediation, mitigation, and/or risk acceptance.
• Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems.
• Recommend mitigating controls and countermeasures.
• Strong knowledge of security standards and best practices.
• Excellent problem-solving and analytical skills.
• Strong cross-team collaboration and coordination across diverse audiences and stakeholders

Skills

Analytical skills

Cross-team collaboration

Security standards

Problem solving

Communication

Education

Bachelor’s degree in IT/Cybersecurity

Certifications: CGRC (CAP), CISA, CompTIA Security+, CISSP

Tools

Tenable

Splunk

GRC JCAM

NIST SP 800-53

Job description

DLH Corp is seeking a Security Assessment & Authorization Analyst to develop Authority to Operate (ATO) security packages and documentation across the RMF lifecycle. You will work with customers to understand technologies, assess vulnerabilities, document security controls, and manage POA&Ms to move solutions through authorization.

The ideal candidate has 3+ years in ATO/RMF, cloud security experience (AWS/Azure/GCP), and relevant certifications. A Public Trust clearance is required.