Senior Security ATO Analyst — RMF & NIST Expert

DLH Corporation; Bethesda (MD); On-site; USD 135,000 - 150,000; Full time

Benefits offered by this job

PTO

Medical, dental, vision

401(k) with match

Job summary

DLH Corporation is seeking an experienced Security Assessment & Authorization Analyst to join our team in Bethesda, MD. The Senior Analyst develops and maintains Authority to Operate (ATO) security packages and authorization documentation and works across the RMF lifecycle for assigned systems.

You will understand technologies, develop security documentation, assess vulnerabilities, and help move solutions through authorization.

Qualifications

• Eight years of experience developing and maintaining ATO packages.
• Experience describing system configuration, operations, and security controls in clear docs.
• Knowledge of Federal guidelines, standards, and control frameworks (NIST 800-53).
• Experience with Cloud Security (AWS, Azure, GCP) in large government environments.

Responsibilities

• Develop and maintain ATO security packages and authorization documentation.
• Assess security controls to ensure NIST 800-53 compliance.
• Assist customers in RMF lifecycle and obtaining Authority to Operate.
• Develop, manage, and update POA&Ms.
• Analyze STIG and SCAP requirements for document compliance.
• Track vulnerabilities through remediation and risk acceptance.
• Evaluate impacts of environment/config changes on security posture.

Skills

Analytical skills

Cross-team collaboration

Security documentation

Education

Bachelor’s degree in information technology or cybersecurity

Certifications: CAP(CGRC), CISA, Security+ , CISSP

Tools

Tenable

Splunk

GRC JCAM

Job description

DLH Corporation is seeking an experienced Security Assessment & Authorization Analyst to join our team in Bethesda, MD. The Senior Analyst develops and maintains Authority to Operate (ATO) security packages and authorization documentation and works across the RMF lifecycle for assigned systems.

You will understand technologies, develop security documentation, assess vulnerabilities, and help move solutions through authorization.