Senior Cybersecurity RMF & Risk Specialist

Nava; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k plan with match

Paid leave and holidays

Tuition reimbursement

Life and AD&D Insurance

Job summary

AnaVation seeks a Sr. Security Specialist (ISSO) to support a mission-critical customer in Washington, DC.

You will join a talented team providing security expertise across risk assessments, RMF, and ATO packaging, with focus on enterprise governance in multi-cloud and on‑prem environments. Responsibilities include developing SA&As, SSPs, incident response and contingency plans, and liaisoning for security compliance.

Qualifications

• 6+ years’ experience with NIST, FISMA, and Security Assessment & Authorization.
• FedRAMP and Cloud experience (Azure, AWS, Oracle OCI).
• Knowledgeable on NIST publications (SP 800‑53r5, SP 800‑53A, SP 800‑18r1).
• In‑depth knowledge of RMF.
• Ability to obtain and maintain a customer Public Trust clearance (sponsorship available).
• CISSP certification required.

Responsibilities

• Support agency risk assessment program including internal audits and streamlined assessment processes.
• Manage security of system accreditation boundaries across multi‑cloud and on‑prem environments.
• Develop and maintain SA&A packages for ATO.
• Create SSPs and supporting docs (Contingency Plans, Incident Response Plans, etc.).
• Coordinate Incident Response and Contingency Plan testing and training.
• Ensure ongoing authorization and continuous monitoring of information systems.
• Review vulnerability data and recommend remediation.
• Provide subject matter expertise to ensure RMF compliance.

Skills

RMF Knowledge

CISSP Certified

NIST SP 800-53r5

FedRAMP & Cloud

SA&A Experience

Vulnerability Tools

Policy & RMF

C‑Level Communication

Data Analysis (Excel/PowerBI)

Tools

JCAM (CSAM)

eMASS

Nessus

BigFix

SCCM

ePO

PowerBI

Job description

AnaVation seeks a Sr. Security Specialist (ISSO) to support a mission-critical customer in Washington, DC.

You will join a talented team providing security expertise across risk assessments, RMF, and ATO packaging, with focus on enterprise governance in multi-cloud and on‑prem environments. Responsibilities include developing SA&As, SSPs, incident response and contingency plans, and liaisoning for security compliance.