RMF & ATO Security Analyst II

dlhcorporation; Bethesda (MD); On-site; USD 102,000 - 115,000; Full time

Job summary

DLH Corporation seeks a Security Assessment & Authorization Analyst to develop and maintain ATO security packages and RMF lifecycle artifacts. The role involves documenting configurations, assessing controls, and tracking POA&Ms across diverse teams.

The ideal candidate has 3+ years in ATO/RMF, cloud security experience with FedRAMP, and certifications such as CISA or CISSP. A Public Trust clearance is required, with competitive benefits and salary.

Qualifications

• Bachelor's degree in information technology, cybersecurity, or a related field.
• 3+ years of experience developing and maintaining ATO security packages and assisting customers with the RMF and ATO lifecycle.
• Experience documenting system configuration, operations, and security controls.
• Experience with Cloud Security (AWS, Azure, GCP) in a large government environment (FedRAMP preferred).
• RMF lifecycle experience and supporting customers to obtain Authority to Operate security packages.
• Experience with security tools such as Tenable, Splunk, and GRC JCAM.
• Working knowledge of Federal security guidelines, standards, and controls (NIST SP 800-53).
• Relevant certifications such as CGRC (CAP), CISA, CompTIA Security+, CISSP.
• Ability to obtain a Public Trust clearance.

Responsibilities

• Support the development and maintenance of ATO security packages and authorization documentation.
• Assess security controls to ensure compliance with NIST 800-53 requirements.
• Develop, manage, and update Plans of Action & Milestones (POA&Ms).
• Analyze STIG and SCAP requirements to ensure document compliance.
• Track vulnerabilities through remediation, mitigation, and risk acceptance.
• Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems.
• Recommend mitigating controls and countermeasures.
• Strong knowledge of security standards and best practices; cross-team coordination across diverse audiences.

Skills

Cross-team collaboration

Problem solving

Analytical skills

RMF knowledge

Education

Bachelor's degree in information technology or cybersecurity

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH Corporation seeks a Security Assessment & Authorization Analyst to develop and maintain ATO security packages and RMF lifecycle artifacts. The role involves documenting configurations, assessing controls, and tracking POA&Ms across diverse teams.

The ideal candidate has 3+ years in ATO/RMF, cloud security experience with FedRAMP, and certifications such as CISA or CISSP. A Public Trust clearance is required, with competitive benefits and salary.