Security Assessment & Authorization Analyst II – RMF & ATO

DLH Corp; Bethesda (MD); On-site; USD 102,000 - 115,000; Full time

Benefits offered by this job

PTO

Medical Insurance

Dental Insurance

Vision Insurance

Supplemental Life with AD&D

Disability Insurance

Flexible Spending Accounts

401(k) Retirement Plan

Job summary

DLH Corp in Bethesda, Maryland is seeking a Security Assessment & Authorization Analyst to develop and maintain ATO packages and support RMF lifecycle across assigned systems. You will work with customers to understand technologies, document security controls, and manage POA&Ms.

The ideal candidate has at least 3 years of experience with RMF/ATO, cloud security (FedRAMP) in a government environment, and familiarity with tools like Tenable, Splunk, and GRC JCAM; ability to coordinate across

Qualifications

• Bachelor’s degree in information technology, Cybersecurity, or a related field.
• Minimum of three (3) years of experience in developing and maintaining ATO security packages and helping customers with the RMF and ATO lifecycle
• Experience developing clear, concise documentation describing system configuration, operations, and security controls
• Prior experience with Cloud Security (AWS, Azure, GCP) within a large government environment (FedRAMP certified) preferred
• Prior experience with the RMF lifecycle and supporting customers to obtain Authority to Operate security packages
• Prior experience working with security tools such as Tenable, Splunk, and GRC JCAM
• Working knowledge of Federal security guidelines, standards, and control frameworks (such as NIST SP 800-53)
• Must be able to obtain a Public Trust clearance

Responsibilities

• Support the development and maintenance of ATO security packages and authorization documentation
• Assess security controls to ensure compliance with NIST 800-53 requirements
• Develop, manage, and update Plans of Action & Milestones (POAMs)
• Analyze STIG and SCAP requirements to ensure document compliance
• Track vulnerabilities through remediation, mitigation, and/or risk acceptance
• Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems
• Recommend mitigating controls and countermeasures
• Strong knowledge of security standards and best practices.
• Excellent problem-solving and analytical skills.
• Strong cross-team collaboration and coordination across diverse audiences and stakeholders

Skills

Problem solving

Analytical skills

Cross-team collaboration

Education

Bachelor's degree in IT/Cybersecurity

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH Corp in Bethesda, Maryland is seeking a Security Assessment & Authorization Analyst to develop and maintain ATO packages and support RMF lifecycle across assigned systems. You will work with customers to understand technologies, document security controls, and manage POA&Ms.

The ideal candidate has at least 3 years of experience with RMF/ATO, cloud security (FedRAMP) in a government environment, and familiarity with tools like Tenable, Splunk, and GRC JCAM; ability to coordinate across