Senior RMF & ATO Security Analyst | Cloud & FedRAMP

dlhcorporation; Bethesda (MD); On-site; USD 135,000 - 150,000; Full time

Benefits offered by this job

PTO

401(k) Plan

Medical insurance

Dental insurance

Vision insurance

Disability coverage

Flexible spending accounts

Career development & certification

Education assistance

Job summary

DLH Corporation seeks an experienced Security Assessment & Authorization Analyst to join our team. The Sr.

SAA will develop and maintain ATO security packages and navigate RMF lifecycle across assigned systems, collaborating with customers and engineering teams to meet compliance. The role requires strong knowledge of NIST SP 800-53, experience with Tenable, Splunk and GRC JCAM, and cloud security in government environments.

Qualifications

• Minimum eight years in developing and maintaining ATO security packages.
• Clear, concise documentation describing system configuration and security controls.
• Experience with Tenable, Splunk, and GRC JCAM.
• Strong knowledge of federal guidelines and NIST SP 800-53.
• Bachelor's degree in IT or cybersecurity.
• Certifications such as CGRC (CAP), CISA, CompTIA Security+, CISSP.
• Experience with Cloud Security (AWS, Azure, GCP) in government environments.
• Ability to obtain a Public Trust clearance.

Responsibilities

• Develop and maintain ATO security packages and authorization documentation.
• Assess security controls to ensure NIST 800-53 compliance.
• Support RMF lifecycle and assist customers in obtaining Authority to Operate.
• Develop and manage Security Plans of Action & Milestones (POA&Ms).
• Analyze STIG and SCAP to ensure document compliance.
• Track vulnerabilities through remediation or risk acceptance.
• Evaluate changes to impacts on security posture and suggest mitigations.

Skills

Problem-solving

Analytical skills

Cross-team collaboration

Education

Bachelor's degree in information technology or cybersecurity

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH Corporation seeks an experienced Security Assessment & Authorization Analyst to join our team. The Sr.

SAA will develop and maintain ATO security packages and navigate RMF lifecycle across assigned systems, collaborating with customers and engineering teams to meet compliance. The role requires strong knowledge of NIST SP 800-53, experience with Tenable, Splunk and GRC JCAM, and cloud security in government environments.