RMF/NIST Security Analyst — ATO & Risk Management

Booz Allen Hamilton; Suffolk (VA); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking a Risk Management Framework Analyst to support NIST RMF/CSF implementation for complex DoD information systems and ATO packages. You will review SSPs, risk assessment reports, and POA&Ms, and coordinate with information assurance managers to ensure proper certification efforts.

Candidates should have 5+ years of RMF/CSF experience, DoD policy knowledge, and relevant security certifications; Top Secret clearance is required.

Qualifications

• Minimum 5 years with NIST RMF/CSF for DoD systems.
• Experience documenting SSPs, risk assessments, A&A, C&A, and POA&Ms.
• Knowledge of contingency planning and DoD auditing/monitoring.

Responsibilities

• Support full ATO certification packages and risk management.
• Review systems documentation and testing results for compliance.
• Interface with information assurance managers and prepare reports.

Skills

NIST RMF/CSF

eMASS

Security controls planning

Documentation review

DoD policy knowledge

Top Secret clearance

Education

Bachelor's degree in Engineering/CS/Cybersecurity/IT/Info Systems

5+ years in national intelligence or 10+ years without degree

Tools

Tenable ACAS

Trellix ePO

ENS/ESS/HBSS

Tanium

Job description

Booz Allen Hamilton is seeking a Risk Management Framework Analyst to support NIST RMF/CSF implementation for complex DoD information systems and ATO packages. You will review SSPs, risk assessment reports, and POA&Ms, and coordinate with information assurance managers to ensure proper certification efforts.

Candidates should have 5+ years of RMF/CSF experience, DoD policy knowledge, and relevant security certifications; Top Secret clearance is required.