RMF Security Analyst – Federal A&A Specialist (Remote)

WINTrio, LLC; Northern (KY); Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401(k) Retirement Plan

Paid time off

Annual bonus

Job summary

WINTrio, LLC is seeking a Security Analyst to support RMF/A&A and ATO processes for USDA information systems. The role involves hands-on development of RMF artifacts, CSAM usage, and collaboration with government security stakeholders.

The position is remote with hybrid work in Maryland, requiring U.S. Citizenship. Responsibilities include maintaining SSPs, CPs, CMPs, IRPs, PIAs, and devising risk-based controls while ensuring compliance across RMF packages.

Qualifications

• Experience developing RMF/A&A artifacts (SSP, CP, CMP, IRP, BIA, PIA, ISA).
• Experience using CSAM or a comparable RMF governance, risk, and compliance system.
• Must be a U.S. citizen and able to meet background investigation requirements.
• Strong technical writing, documentation, analytical and quality-assurance skills.

Responsibilities

• Collect, review, and update system information in RMF packages.
• Create and maintain CSAM system records and narratives.
• Develop and upload PTAs, PIAs, and risk assessments.
• Finalize SSPs, CPs, CMPs, IRPs, BIAs, and ISAs with stakeholders.
• Support RMF concurrence reviews and remediation of findings.

Skills

RMF

A&A

ATO

Technical writing

Analytical skills

Tools

CSAM

Job description

WINTrio, LLC is seeking a Security Analyst to support RMF/A&A and ATO processes for USDA information systems. The role involves hands-on development of RMF artifacts, CSAM usage, and collaboration with government security stakeholders.

The position is remote with hybrid work in Maryland, requiring U.S. Citizenship. Responsibilities include maintaining SSPs, CPs, CMPs, IRPs, PIAs, and devising risk-based controls while ensuring compliance across RMF packages.