Senior RMF Analyst - DoD Compliance & ATO Lead

Socket.dev; Huntsville (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

Chronos Operations, LLC in Huntsville, AL seeks an experienced RMF Analyst IV to oversee RMF activities for Army CIO/CIO programs. You will conduct RMF analysis, develop System Security Plans, and coordinate A&A tasks with stakeholders to maintain compliance and authorization status.

The role requires extensive RMF experience, DoD program exposure, and an active security clearance. You will collaborate with cross-functional teams to ensure timely, accurate documentation and risk mitigation.

Qualifications

• 8+ years of experience in Cybersecurity compliance/Risk Management Framework.
• Active Secret clearance with ability to obtain TS/SCI eligibility.
• Security+ or equivalent baseline certification (DoD 8570.01-M).
• Experience supporting DoD or federal programs is highly desirable.

Responsibilities

• Assist RMF practitioner managing ATO packages, continuous monitoring plans, and eMASS documentation.
• Develop, review, and update RMF/AO documentation and ensure compliance with RMF/Continuous Monitoring.
• Coordinate with control assessors and stakeholders to ensure security posture and timely milestones.
• Prepare tests plans and conduct security control testing per NIST SP 800-53, DoDI 8510.01.
• Oversee eMASS package completion, artifacts, and POA&M tracking.

Skills

RMF analysis

NIST SP 800-53

DoDI 8510.01

eMASS

Cybersecurity

Education

Bachelor's degree in STEM/IT

Tools

eMASS

Microsoft Office

Job description

Chronos Operations, LLC in Huntsville, AL seeks an experienced RMF Analyst IV to oversee RMF activities for Army CIO/CIO programs. You will conduct RMF analysis, develop System Security Plans, and coordinate A&A tasks with stakeholders to maintain compliance and authorization status.

The role requires extensive RMF experience, DoD program exposure, and an active security clearance. You will collaborate with cross-functional teams to ensure timely, accurate documentation and risk mitigation.