RMF Cybersecurity Analyst: ATO & Compliance Lead

Booz Allen Hamilton; Washington (District of Columbia); Vor Ort; USD 99.000 - 225.000; Vollzeit

Zusammenfassung

Booz Allen Hamilton in Washington, DC seeks an RMF Cybersecurity Analyst to lead RMF/A&A activities and manage ATO renewals for systems across their lifecycle. You will partner with the ISSO to enforce security policies and verify control implementations.

The role requires 3+ years of RMF A&A experience and TS/SCI clearance, with responsibilities including BOE documentation (SSP and RMF control family plans) and eMASS package management.

Qualifikationen

• 3+ years RMF A&A experience.
• Experience executing manual and automated A&A processes and creating artifacts when automation is unavailable.
• Experience developing RMF BOE documentation (SSP and RMF Control Family Plans).
• Knowledge of RMF ATO packages within eMASS.
• TS/SCI clearance required.
• HS diploma or GED required.

Aufgaben

• Lead RMF and ATO processes for systems across their lifecycle.
• Manage cybersecurity assessments and A&A activities; implement security policies.
• Oversee compliance with CNSSI-1253, NIST 800-37, and NIST 800-53.
• Validate security control implementations; develop remediation strategies.
• Assess ACAS scans, STIGs, and controls to identify vulnerabilities and mitigations.
• Translate risks into clear cybersecurity status reports for stakeholders and AOs.

Kenntnisse

RMF A&A

A&A processes

BOE docs

eMASS knowledge

TS/SCI clearance

ISSO/ISSM/ISSE exposure

Ausbildung

HS diploma or GED

Tools

ACAS

STIGs

SCAP

VRAM

HBSS

PPSM

Jobbeschreibung

Booz Allen Hamilton in Washington, DC seeks an RMF Cybersecurity Analyst to lead RMF/A&A activities and manage ATO renewals for systems across their lifecycle. You will partner with the ISSO to enforce security policies and verify control implementations.

The role requires 3+ years of RMF A&A experience and TS/SCI clearance, with responsibilities including BOE documentation (SSP and RMF control family plans) and eMASS package management.