Senior RMF & ATO Security Analyst

Socket.dev; Bethesda (MD); On-site; USD 135,000 - 150,000; Full time

Benefits offered by this job

401(k) Matching

Medical Insurance

Dental & Vision

Job summary

DLH Corporation is seeking an experienced Security Assessment & Authorization Analyst to develop and maintain Authority to Operate (ATO) packages and RMF-based documentation. You will work with customers to understand technologies, assess vulnerabilities, and implement security controls across the lifecycle.

The ideal candidate has hands-on RMF experience, strong knowledge of NIST SP 800-53, and the ability to coordinate with cross-functional teams to solve cybersecurity challenges in a federal

Qualifications

• Eight or more years developing and maintaining ATO security packages.
• Experience documenting system configurations, operations, and security controls.
• Knowledge of security tools such as Tenable, Splunk, and GRC JCAM.
• Familiar with federal standards and controls (NIST SP 800-53).
• Active security certifications are required.

Responsibilities

• Develop and maintain ATO security packages and authorization docs.
• Assess controls for NIST 800-53 compliance.
• Support RMF lifecycle and help clients obtain Authority to Operate.
• Create and manage POA&Ms and track remediation steps.
• Review STIG/SCAP requirements for documentation compliance.
• Monitor vulnerabilities and coordinate remediation or risk acceptance.
• Evaluate changes to security posture from configuration updates.
• Recommend compensating controls and mitigations.

Skills

ATO packages

RMF lifecycle

Security documentation

NIST 800-53

Collaboration

Education

Bachelor’s degree in IT or Cybersecurity

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH Corporation is seeking an experienced Security Assessment & Authorization Analyst to develop and maintain Authority to Operate (ATO) packages and RMF-based documentation. You will work with customers to understand technologies, assess vulnerabilities, and implement security controls across the lifecycle.

The ideal candidate has hands-on RMF experience, strong knowledge of NIST SP 800-53, and the ability to coordinate with cross-functional teams to solve cybersecurity challenges in a federal