Senior ATO/A&A Cybersecurity SME

Enterprise Solutions & Management; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

Enterprise Solutions and Management seeks a Senior ATO/A&A Subject Matter Expert to lead cybersecurity activities for a federal program in the Washington, DC area. The role focuses on analyzing ACAS scans, prioritizing vulnerabilities, and driving remediation with the technical team.

You will document Plans of Action and Milestones in eMASS, manage continuous monitoring under RMF, and coordinate with the ISSM and stakeholders to ensure compliance with NIST SP 800-53 and 800-37.

Qualifications

• Leads analysis of ACAS scans to identify vulnerabilities and coordinates remediation.
• Creates and manages POA&Ms in eMASS for non-immediate remediations.
• Implements RMF continuous monitoring with control tailoring and reporting.
• Coordinates with ISSM and stakeholders to integrate cybersecurity requirements.
• Performs A&A/ATO activities and maintains PPSM documentation per standards.

Responsibilities

• Lead ACAS analysis and remediation coordination with technical teams.
• Develop, document, and track POA&Ms in eMASS for open findings.
• Maintain continuous RMF monitoring and formal risk reports.
• Serve as cybersecurity liaison across program lifecycle.
• Support A&A/ATO efforts and PPSM documentation.

Skills

ACAS analysis

POA&M in eMASS

RMF continuous monitoring

ISSM liaison

NIST SP 800-53 / 800-37

Education

Bachelor's degree in Cybersecurity/Information Assurance/Information Systems/IT

Tools

eMASS

JCAM system

Job description

Enterprise Solutions and Management seeks a Senior ATO/A&A Subject Matter Expert to lead cybersecurity activities for a federal program in the Washington, DC area. The role focuses on analyzing ACAS scans, prioritizing vulnerabilities, and driving remediation with the technical team.

You will document Plans of Action and Milestones in eMASS, manage continuous monitoring under RMF, and coordinate with the ISSM and stakeholders to ensure compliance with NIST SP 800-53 and 800-37.