Senior Security Specialist - RMF, NIST & Cloud Risk

AnaVation LLC; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical insurance (employee and depend

Dental insurance (employee and depend)

Disability insurance

Vision insurance

401k match

Paid leave

Tuition reimbursement

Life Insurance

Job summary

AnaVation LLC is seeking a Sr. Security Specialist (ISSO) for a mission critical customer in Washington, DC.

You will join a high-performing team providing security expertise across a multi-cloud and on-premise environment. Responsibilities include leading risk assessments, developing SA&A packages, maintaining SSPs, and coordinating incident response planning to ensure continuous authorization and security posture.

Qualifications

• 6+ years’ experience with NIST, FISMA, and Security Assessment & Authorization.
• FedRAMP and Cloud experience (Azure, AWS, OCI).
• In-depth knowledge of RMF and NIST publications (SP 800-53r5, SP 800-53A, SP 800-18r1).
• Ability to obtain and maintain a Public Trust clearance (sponsorship available).
• CISSP certification required.

Responsibilities

• Serve as integral team member for agency risk assessment and audits.
• Manage security of system accreditation boundary across multi-cloud and on-premise.
• Develop and maintain SA&A packages leading to Authority to Operate.
• Create SSPs and supporting docs such as Contingency and Incident Response Plans.
• Coordinate incident response and contingency planning training.

Skills

RMF knowledge

NIST SP 800-53

CISSP

Risk assessment

Cloud security

Tools

eMASS

JCAM

Nessus

BigFix/SCCM

Incident response tooling

Job description

AnaVation LLC is seeking a Sr. Security Specialist (ISSO) for a mission critical customer in Washington, DC.

You will join a high-performing team providing security expertise across a multi-cloud and on-premise environment. Responsibilities include leading risk assessments, developing SA&A packages, maintaining SSPs, and coordinating incident response planning to ensure continuous authorization and security posture.