Security Authorization & RMF Analyst II — Cyber Compliance

Socket.dev; Bethesda (MD); On-site; USD 102,000 - 115,000; Full time

Job summary

DLH Corporation is seeking a Security Assessment & Authorization Analyst to develop and maintain ATO security packages and documentation, guiding systems through the RMF lifecycle. You will collaborate across teams to assess controls, track POA&Ms, and ensure compliance with NIST 800-53 and related standards.

The ideal candidate has RMF/ATO experience, cloud security in a government context, and relevant certifications.

Qualifications

• Bachelor’s degree in information technology, Cybersecurity, or a related field.
• Minimum of three (3) years of experience in developing and maintaining ATO security packages and helping customers with the RMF and ATO lifecycle.
• Experience developing clear, concise documentation describing system configuration, operations, and security controls.
• Prior experience with Cloud Security (AWS, Azure, GCP) within a large government environment (FedRAMP certified) preferred.
• Prior experience with the RMF lifecycle and supporting customers to obtain Authority to Operate security packages.
• Prior experience working with security tools such as Tenable, Splunk, and GRC JCAM.
• Working knowledge of Federal security guidelines, standards, and control frameworks (such as NIST SP 800-53).
• Relevant certifications (e.g., CGRC (CAP), CISA, CompTIA Security+, CISSP) required.
• Must be able to obtain a Public Trust clearance

Responsibilities

• Support the development and maintenance of ATO security packages and authorization documentation
• Assess security controls to ensure compliance with NIST 800-53 requirements
• Develop, manage, and update Plans of Action & Milestones (POA&Ms)
• Analyze STIG and SCAP requirements to ensure document compliance
• Track vulnerabilities through remediation, mitigation, and/or risk acceptance
• Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems
• Recommend mitigating controls and countermeasures
• Strong knowledge of security standards and best practices.
• Excellent problem-solving and analytical skills.
• Strong cross-team collaboration and coordination across diverse audiences and stakeholders

Skills

Cross-team collaboration

Problem-solving

Analytical skills

Security standards knowledge

RMF lifecycle understanding

Public Trust eligibility

Education

Bachelor's degree in IT / Cybersecurity or related field

Tools

Tenable

Splunk

GRC JCAM

AWS

Azure

GCP

Job description

DLH Corporation is seeking a Security Assessment & Authorization Analyst to develop and maintain ATO security packages and documentation, guiding systems through the RMF lifecycle. You will collaborate across teams to assess controls, track POA&Ms, and ensure compliance with NIST 800-53 and related standards.

The ideal candidate has RMF/ATO experience, cloud security in a government context, and relevant certifications.