RMF Cybersecurity Analyst - Lead ATO & Compliance

Booz Allen Hamilton; Washington, Northern (District of Columbia, KY); Hybrid; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton in Washington, DC is seeking a RMF Cybersecurity Analyst to lead RMF/ATO activities and support daily compliance across multiple systems. You will develop System Security Plans (SSP) and RMF BOE documentation, coordinate with the ISSO, and ensure adherence to required standards.

A TS/SCI clearance is required. The role involves translating technical risk into clear status reports for Authorizing Officials and guiding remediation efforts across the enterprise.

Qualifications

• 3+ years of experience in Risk Management Framework (RMF) Assessment and Authorization (A&A).
• Experience executing manual and automated A&A processes, including developing localized workflows and manual artifact generation when automated tools are unavailable.
• Experience independently developing cybersecurity RMF body of evidence (BOE) documentation such as System Security Plans (SSP) and RMF Control Family Plans.
• Knowledge of developing, managing, and submitting RMF ATO packages within the Enterprise Mission Assurance Support Service (eMASS).
• TS/SCI clearance
• HS diploma or GED

Responsibilities

• Lead RMF and Authorization to Operate (ATO) processes for multiple systems across their lifecycle.
• Manage cybersecurity assessments, A&A activities, and the practical implementation of security policies.
• Oversee and enforce compliance with CNSSI-1253, NIST 800-37, and NIST 800-53 standards.
• Validate security control implementations, perform system verification and testing, and generate remediation strategies.
• Assess ACAS scans, STIGs, and security controls to identify vulnerabilities and engineer mitigations.
• Translate complex technical risks into clear cybersecurity status reports for stakeholders and Authorizing Officials (AOs).

Skills

RMF A&A

A&A documentation

eMASS knowledge

ACAS scans

STIGs/SCAP

SRRM??

Education

HS diploma or GED

Tools

ACAS

HBSS

VRAM

SCAP

eMASS

STIGs

Job description

Booz Allen Hamilton in Washington, DC is seeking a RMF Cybersecurity Analyst to lead RMF/ATO activities and support daily compliance across multiple systems. You will develop System Security Plans (SSP) and RMF BOE documentation, coordinate with the ISSO, and ensure adherence to required standards.

A TS/SCI clearance is required. The role involves translating technical risk into clear status reports for Authorizing Officials and guiding remediation efforts across the enterprise.