Senior RMF Security Analyst — Hybrid (MD), ATO Specialist

AssurIT; Beltsville (MD); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Paid time off

Job summary

Assurit is seeking a senior, hands-on RMF Security Analyst to support federal information systems through RMF Steps 1–3. The analyst will develop and maintain security documentation to achieve, maintain, and renew system Authorities to Operate (ATOs).

The ideal candidate has extensive federal A&A experience and the ability to independently develop high-quality RMF documentation across multiple information systems, including SSPs and contingency plans.

Qualifications

• Bachelor’s degree and at least six years of relevant cybersecurity experience.
• Hands-on experience completing all aspects of the NIST RMF for federal information systems.
• Experience developing and maintaining federal A&A and authorization packages.
• Experience using CSAM and developing SSPs, contingency plans, and security docs.
• Ability to produce Section 508–compliant documentation and handle sensitive government information.
• Ability to obtain and maintain federal background investigation, suitability, and PIV credentials.

Responsibilities

• Categorize the system and maintain CSAM records and system descriptions.
• Prepare and update PTAs and PIAs, and perform FIPS 199 categorizations.
• Select controls, tailor decisions, and develop compensating controls.
• Develop and update contingency, incident response, BIA, and interconnection security plans.
• Finalize RMF deliverables and support concurrence and authorization reviews.

Skills

Technical writing

RMF knowledge

FISMA/NIST SP 800-53 experience

FedRAMP familiarity

CSAM experience

Education

Bachelor’s degree in cybersecurity or related field

Tools

CSAM

Documentation tooling

Job description

Assurit is seeking a senior, hands-on RMF Security Analyst to support federal information systems through RMF Steps 1–3. The analyst will develop and maintain security documentation to achieve, maintain, and renew system Authorities to Operate (ATOs).

The ideal candidate has extensive federal A&A experience and the ability to independently develop high-quality RMF documentation across multiple information systems, including SSPs and contingency plans.