Senior RMF & ATO Security Analyst - FedRAMP/Cloud

DHL Holdings Corp; Austin (TX); On-site; USD 135,000 - 150,000; Full time

Benefits offered by this job

401(k) Retirement Plan

Paid time off (PTO)

Healthcare benefits

Job summary

DLH Corp is seeking an experienced Security Assessment & Authorization Analyst to join our team. You will develop and maintain ATO security packages and navigate the RMF lifecycle across multiple federal systems, collaborating with customers to secure authorization and maintain security documentation.

The role requires eight years of experience, strong knowledge of NIST 800-53, and hands-on work with Tenable, Splunk, and GRC JCAM.

Qualifications

• Bachelor's degree in information technology, cybersecurity, or a related field.
• Certifications such as CGRC (CAP), CISA, CompTIA Security+, CISSP are required.
• Experience developing and maintaining ATO security packages is essential.

Responsibilities

• Develop and maintain ATO security packages and authorization documentation.
• Assess security controls to ensure compliance with NIST 800-53 requirements.
• Significant experience with the RMF lifecycle and assisting customers in obtaining Authority to Operate security packages.
• Develop, manage, and update Security Plans of Action & Milestones (POA&Ms).
• Analyze STIG and SCAP requirements to ensure document compliance.
• Track vulnerabilities through remediation, mitigation, and/or risk acceptance.
• Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems.
• Recommend mitigating controls and countermeasures.

Skills

Problem solving

Analytical skills

Cross-team collaboration

Excellent communication

Education

Bachelor's degree in IT/Cybersecurity

CGRC (CAP)

CISA

CompTIA Security+

CISSP

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH Corp is seeking an experienced Security Assessment & Authorization Analyst to join our team. You will develop and maintain ATO security packages and navigate the RMF lifecycle across multiple federal systems, collaborating with customers to secure authorization and maintain security documentation.

The role requires eight years of experience, strong knowledge of NIST 800-53, and hands-on work with Tenable, Splunk, and GRC JCAM.