Security Authorization Analyst: RMF & ATO Expert

DLH; Bethesda (MD); On-site; USD 115,000 - 126,000; Full time

Benefits offered by this job

PTO

401(k) matching

Health, dental, vision insurance

Training & education assistance

Job summary

DLH in Bethesda, MD is seeking a Security Assessment & Authorization Analyst to develop and maintain ATO packages and artifacts, working across the RMF lifecycle.

The ideal candidate has at least five years of experience, deep knowledge of NIST 800-53, and cloud security within federal environments, with the ability to obtain a Public Trust clearance. The role offers a path to advanced certifications and a collaborative, mission-driven team.

Qualifications

• Minimum of five years developing and maintaining ATO security packages and RMF lifecycle.
• Experience documenting system configurations, operations, and security controls clearly.
• Experience with Tenable, Splunk, and GRC JCAM.
• Working knowledge of federal security guidelines and NIST SP 800-53.
• Bachelor’s degree in IT, Cybersecurity, or related field.

Responsibilities

• Support the development and maintenance of ATO security packages and authorization documentation
• Assess security controls to ensure compliance with NIST 800-53 requirements
• Prior experience with the RMF lifecycle and supporting customers in obtaining Authority to Operate security packages
• Develop, manage, and update Plans of Action & Milestones (POA&Ms)
• Analyze STIG and SCAP requirements to ensure document compliance
• Track vulnerabilities through remediation, mitigation, and/or risk acceptance
• Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems
• Recommend mitigating controls and countermeasures

Skills

ATO packages

RMF lifecycle

NIST 800-53

Tenable

Splunk

GRC JCAM

Cloud security

Public Trust clearance

Education

Bachelor’s degree in IT/Cybersecurity or related field

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH in Bethesda, MD is seeking a Security Assessment & Authorization Analyst to develop and maintain ATO packages and artifacts, working across the RMF lifecycle.

The ideal candidate has at least five years of experience, deep knowledge of NIST 800-53, and cloud security within federal environments, with the ability to obtain a Public Trust clearance. The role offers a path to advanced certifications and a collaborative, mission-driven team.