RMF Cybersecurity Analyst - ATO & Compliance Lead

Edgewater Federal Solutions; Washington; On-site; USD 190,000 - 200,000; Full time

Benefits offered by this job

Competitive salary

Medical Insurance

Dental Insurance

Vision Insurance

401K / Retirement plan

Tuition and Technical Training Reimbur

Job summary

Edgewater Federal Solutions seeks a Cybersecurity Analyst to lead RMF lifecycle activities and drive compliance for federal information systems. You will prepare authorization packages, document controls, and guide system owners through risk-based remediation.

The role demands an active Top Secret clearance with SCI eligibility and 3–5 years in RMF, NIST, FISMA, and continuous monitoring. Onsite in Washington, DC with a strong emphasis on writing and collaboration.

Qualifications

• Active Top Secret clearance with ability to obtain SCI.
• 3–5 years of cybersecurity RMF, compliance, assessments, or ISSO functions in federal or regulated environments.
• Knowledge of NIST SPs 800-37/53, FISMA, FIPS 199/200 and related federal guidance.
• Experience maintaining RMF documentation and continuous monitoring artifacts.
• Strong technical writing and ability to translate requirements into actions.

Responsibilities

• Lead RMF lifecycle activities including categorization, control selection, assessments, authorization, and continuous monitoring.
• Develop RMF documentation: SSPs, SAPs/SARs, POA&Ms, risk assessments, PIAs, CAM artifacts.
• Conduct risk and vulnerability assessments; evaluate impact and remediation.
• Coordinate with owners and engineers to implement NIST SP 800-53 controls.
• Support ATO by preparing packages, tracking findings, briefing on residual risk.

Skills

RMF lifecycle

Risk assessments

Vulnerability assessments

Authorization & continuous monitoring

Technical writing

NIST SP 800-53 mapping

Communicate risk to stakeholders

Education

Bachelor's degree in IT/CS or related field

Tools

eMASS

SIEM

FISMA/NIST guidance knowledge

Job description

Edgewater Federal Solutions seeks a Cybersecurity Analyst to lead RMF lifecycle activities and drive compliance for federal information systems. You will prepare authorization packages, document controls, and guide system owners through risk-based remediation.

The role demands an active Top Secret clearance with SCI eligibility and 3–5 years in RMF, NIST, FISMA, and continuous monitoring. Onsite in Washington, DC with a strong emphasis on writing and collaboration.