Sign up to access all features of our service.
  • Job search
  • Favorites
  • Create a CV
    New
  • Salaries
  • Subscriptions

RMF/Assessment & Authorization (A&A) Analyst

$115k - $135k

Socket.dev

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based on contract win. SkyePoint Decisions is seeking a RMF/Assessment & Authorization (A&A) Analyst tosupport the implementation and maintenance of the Risk Management Framework (RMF) for information systems and applications. The Analyst works closely with System Owners, Information System Security Officers (ISSOs), cybersecurity teams, and Government stakeholders to ensure systems achieve and maintain Authorization to Operate (ATO) status in compliance with Federal cybersecurity requirements. The position is responsible for developing and maintaining authorization documentation, supporting security assessments, tracking remediation activities, facilitating continuous monitoring activities, and contributing to ongoing cybersecurity compliance efforts. This position is fully remote. Responsibilities: Support development, maintenance, validation, and closure tracking of Plans of Action and Milestones (POA&Ms). Coordinate remediation tracking activities and validate corrective-action evidence supporting POA&Ms closure recommendations. Coordinate with Privacy Officials to support Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and integration of privacy requirements into authorization activities. Support RMF activities across the system development lifecycle. Assist with system categorization, boundary definition, and security control implementation efforts. Maintain authorization documentation and supporting artifacts. Ensure security documentation remains current and compliant with applicable standards. Coordinate with stakeholders to collect and validate required security evidence. Develop, update, and maintain authorization package documentation. Assist in assembling complete authorization packages for review and approval. Support reauthorization and decommissioning activities. Participate in quality control reviews of security documentation. Work closely with ISSOs, System Owners, Security Engineers, Privacy Officials, and Program Management teams. Participate in authorization working groups and compliance meetings. Provide status updates and reporting to project leadership. Support cybersecurity awareness and compliance initiatives. Required Qualifications: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Assurance, or related discipline. Minimum 5 years of cybersecurity, information assurance, or RMF experience supporting Federal information systems. Experience supporting Assessment & Authorization (A&A) efforts and RMF processes. Familiarity with: NIST Risk Management Framework (SP 800-37), NIST SP 800-53 Rev. 5, and FISMA Experience preparing or maintaining security documentation and authorization artifacts. Strong analytical, organizational, and communication skills. U.S. Citizenship required. Ability to obtain and maintain a Public Trust. Preferred Qualifications: One or more of the following certifications: GCIH (GIAC Certified Incident Handler) ECIH (EC-Council Certified Incident Handler) Security+ CEH CySA+ GCFA

CISSP

OSCP Experience supporting HHS or other Federal civilian agencies. Experience using governance, risk, and compliance (GRC) platforms such as eMASS, Xacta, Archer, or ServiceNow GRC. Experience supporting cloud-based environments (AWS, Azure, or GCP). Knowledge of Zero Trust Architecture, CDM, and FedRAMP requirements. Experience working in a FISMA-compliant environment. Compensation: Salary Range: $115,000 - $135,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U.S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here #J-18808-Ljbffr Socket.dev

Vacancy posted 3 days ago
Similar jobs that could be interesting for youBased on the RMF/Assessment & Authorization (A&A) Analyst in Bethesda, MD vacancy
  • SkyePoint Decisions is seeking an RMF/Assessment & Authorization (A&A) Analyst to support the implementation and maintenance of the RMF for information systems and applications. The Analyst works closely with System Owners, ISSOs, cybersecurity teams, and Government stakeholders... 
    Suggested
    Remote job

    SkyePoint Decisions

    Bethesda, MD
    4 days ago
  • SkyePoint Decisions is seeking an RMF/Assessment & Authorization (A&A) Analyst to support the implementation and maintenance of the RMF for information systems and applications. You will work with System Owners, ISSOs, cybersecurity teams, and Government stakeholders to... 
    Suggested
    Remote job

    Socket.dev

    Bethesda, MD
    3 days ago
  •  ...located in McLean, Virginia, is looking for an RMF / A&A Technical Consultant to execute cybersecurity authorization and compliance activities. The role entails developing...  ..., supporting audits, and performing risk assessments in cloud and enterprise systems. Ideal... 
    Suggested

    Guidehouse

    Mc Lean, VA
    2 days ago
  • Amentum is seeking a Cybersecurity Analyst to support our McLean, VA customer, focusing on RMF-based assessment and authorization for a federal civilian agency. The role develops...  ...policy and RMF/NIST controls, with hands-on A&A experience and a TS clearance with... 
    Suggested

    PAE Government Services Inc.

    Mc Lean, VA
    1 day ago
  •  ...Description Job Title: Cyber & A&A Security Specialist...  ...least 5 years of performing assessments of Federal Information Systems...  ...Security Control Assessments and Authorization (A&A) activities for NWS FIPS...  ...NIST Risk Management Framework (RMF), NWS policy, NOAA, and DOC... 
    Suggested
    Temporary work
    Remote work

    ATTAINX INC

    Silver Spring, MD
    a month ago
  •  ...Bethesda, Maryland is seeking a mid-level RMF IT Security Analyst to support RMF lifecycle activities, security assessments, continuous monitoring, and compliance initiatives...  ...involves developing SSPs, SARs, POA&Ms, and authorization packages while #J-18808-Ljbffr System One
    Remote job

    System One

    Bethesda, MD
    3 days ago
  • Job Title: RMF IT Security Analyst Location: Bethesda, Maryland Type: Direct Hire / Perm Work Model...  ...RMF lifecycle activities, security assessments, continuous monitoring, and...  ...documentation including SSPs, SARs, POA&Ms, and authorization packages. Support system... 
    Permanent employment
    Local area
    Remote work

    System One

    Bethesda, MD
    3 days ago
  • $99k - $225k

     ...infrastructure and personnel dynamics to assess the full threat landscape. From there,...  ...experience in cybersecurity and Assessment and Authorization (A&A) supporting DoD environmentsExperience...  ...or DoD ATO packages, performing A&A and RMF, and conducting risk assessments for... 
    Full time
    Contract work
    Part time
    For contractors
    Work at office
    Local area
    Remote work

    Booz Allen Hamilton

    McLean, VA
    2 days ago
  •  ...Description Job Description A&A AnalystLocation:...  ...is seeking an A&A Analyst to support cybersecurity...  ...and associated RMF artifacts.Maintain SSPs...  ...compliance stakeholders.Track assessment status, open findings,...  ...package updates, and authorization boundary... 
    Contract work
    For contractors

    Argo Cyber Systems

    Arlington, VA
    8 days ago
  •  ...Title: Senior Cyber-Security Analyst / Navy Validator...  ...Research (ONR) in the area of Assessment and Authorization of ONR systems and networks....  ...Risk Management Framework (RMF) Implementation Plan IAW DODI...  ...Assessment and Authorization (A&A) Process (RMF) Ensures current... 
    For contractors
    Work at office
    Local area
    Immediate start

    Saliense Consulting LLC

    McLean, VA
    more than 2 months ago
  •  ...Job Type: Full Time Location: Columbia, Md. Clearance: TS/SCI w/Polygraph VMR Strategic Solutions is seeking an RMF/Security Assessment. Are you interested in joining a dynamic team responsible for supporting USCYBERCOM’s internal command IT systems, as well... 
    Full time
    Shift work

    VMR Strategic Solutions

    Derwood, MD
    a month ago
  • Amentum is seeking a Cybersecurity Analyst to support a McLean, VA based federal civilian agency as a contractor. The role focuses on RMF/A&A activities, developing SSPs, POA&Ms, SARs, and related RMF artifacts, with emphasis on risk analysis and security documentation... 
    Civilian Contractor

    Amentum

    Mc Lean, VA
    2 days ago
  • General Dynamics - IT seeks a Cyber Analyst Principal for a critical contract role on a commercial...  ...5+ years in information security, deep RMF knowledge, and hands-on experience with...  ...-domain solutions, and security control assessment, with the ability to present risk to... 
    Full time
    Contract work

    General Dynamics

    Mc Lean, VA
    2 days ago
  • $110k - $130k

     ...Vulnerability Management Analyst to support a cybersecurity...  ...owners, security engineers, RMF personnel, and operational...  ...are properly assessed, prioritized, remediated,...  .... Collaborate with RMF/A&A teams to support Authorization to Operate (ATO) activities... 
    Contract work
    Remote work

    SkyePoint Decisions

    Washington DC
    12 days ago
  • $38 - $42 per hour

     ...Information Assurance Analyst / Engineer Razor is looking...  ...specific work authorizations; inquire within. The...  ...perform tasks related to A&A to ensure assigned information...  ...lead teams to conduct assessments of information systems...  ...VA Cyber Security and RMF process.... 
    Long term contract
    Contract work
    Remote work

    Razor USA

    Rockville, MD
    21 hours ago
  •  ...timeDescriptionClient Solution Architects (CSA) is currently seeking an Analyst I to support onsite in the Arlington, VA area.For...  ..., including preparation of Risk Management Framework (RMF) Assessment and Authorization (A&A) packages and Enterprise Privacy Inspection Reports in... 
    Contract work
    For subcontractor
    Work at office
    Remote work

    Client Solution Architects

    Arlington, VA
    1 day ago
  • Kingfisher Systems, Inc. seeks a Principal Information Assurance Analyst to support the Headquarters Department of the Army ODCS...  ...environments. The successful candidate will manage RMF processes, prepare authorization packages, and ensure compliance with DoD 8510.01, ICD 50... 

    Kingfisher Systems

    Alexandria, VA
    4 days ago
  • $104k - $166k

     ...The Vulnerability Management Analyst will support the Federal Aviation...  .... Validate findings, assess severity and risk impact, and...  ...management. Participate in ATO (Authorization to Operate) and continuous...  ...monitoring activities within the RMF process. Continuous... 
    Contract work
    Local area
    Remote work
    Shift work

    Peraton

    Bethesda, MD
    3 days ago
  • $115k - $131k

     ...Vulnerability Management Analyst to support the NIH cybersecurity...  ..., security engineers, RMF personnel, and operational...  ...are properly assessed, prioritized, remediated,...  .... Collaborate with RMF/A&A teams to support Authorization to Operate (ATO) activities... 
    Contract work
    Local area
    Flexible hours

    The Copper River Family of Companies

    Bethesda, MD
    1 day ago
  • $78.9k - $123.3k

     ...compliance professional to support system authorization and continuous monitoring activities...  ...will have experience working with NIST RMF, NIST SP 800-53 controls, security authorization...  ...working with technical teams to assess control implementation, identify compliance... 
    Permanent employment
    Full time
    Part time
    Work at office
    Local area
    Remote work

    Noblis

    Washington DC
    2 days ago
  • Senior Information Assurance (IA) Lead Analyst VOR Technology is a privately held,...  ...skills in Certification & Accreditation / Assessment & Authorization (C&A/A&A). Responsibilities Provide DoD IA...  ...Manager Executing C&A/A&A within DoD RMF (DoD 8500, DoD 8510, NIST 800-37/-53)... 
    Local area

    VOR Technology

    Arlington, VA
    3 days ago
  • $100k - $140k

     ...Position: Operations Research and Industrial Engineering Analyst, Senior - FAA Function: Operations Research, Industrial...  ...include but are not limited to: Update and create Assessment and Authorization (A&A) documentation to support FAA’s ATO processes. Conduct... 
    Local area
    Remote work

    COBEC INC

    Washington DC
    more than 2 months ago
  • $180k - $200k

     ...currently seeking an Operations Research Analyst SME. This position is a full-time...  ...analyzing data from all test phases to assess Critical Operating Issues, systems under...  ...statement herein is intended to imply any authorities to commit Battelle unless special written... 
    Full time
    Temporary work
    Work experience placement
    Work at office
    Local area
    Remote work
    Flexible hours

    Battelle Memorial Institute

    Arlington, VA
    1 day ago
  •  ...makpar.com/careers . The Senior Information Security Analyst will perform the core cybersecurity assessment and compliance work for IRS Safeguards. The role...  ...5, CIS Benchmarks, DISA STIGs, FIPS, OMB A-130, and RMF guidance. Required Qualifications • High school... 
    Full time
    Start working today
    Flexible hours

    Makpar Corporation

    Washington DC
    21 hours ago
  •  ...Description Information Security Analyst Duties and Responsibilities:...  ...Conduct vulnerability assessments and implement remediations aligned...  ...pipelines Support Authority to Operate (ATO) processes by...  ...Patching, eMASS, and related RMF tools Cybersecurity, Systems... 
    Remote work
    3 days per week

    General Dynamics Information Technology

    Washington DC
    16 days ago
  • $100k - $120k

     ...runs on, and setting the standards other analysts follow. You'll operate with significant...  ...Proven ability to independently source, assess, and prioritize data and competing asks...  ...government with your Form I-9 information to confirm that you are authorized to work in the U.S.... 
    Shift work

    Xometry

    Silver Spring, MD
    3 days ago
  • $99k - $225k

     ...designing and modernizing workflows for authorization, POA&M tracking, and audit evidence collection...  ...Security Plan (SSP) development, risk assessment, and control mapping processesExperience...  ...related SPs, Risk Management Framework (RMF), Federal Information Processing... 
    Full time
    Contract work
    Part time
    Work at office
    Local area
    Remote work

    Booz Allen Hamilton

    McLean, VA
    4 days ago
  •  ...Information Assurance Support Analyst LOCATION: Rockville, MD...  ...Experience reviewing FedRAMP authorization packages and understanding how...  ...systems through the Security Assessment & Authorization (SA&A) Assess...  ...Risk Management Framework (RMF). This includes security categorizations... 
    Full time
    Contract work
    Work at office

    Astrion

    Rockville, MD
    more than 2 months ago
  • $340 per month

    Missile Defense and Space Systems Research Analyst OverviewApply your analytical skills to...  ...the Department of War’s operational assessment of missile defense and space systems. As...  ...firsthand system knowledge.High-Level Briefing: Author written reports and deliver oral... 
    Local area
    Relocation package
    Flexible hours

    Institute for Defense Analyses

    Alexandria, VA
    4 days ago
  • $140k

    DescriptionInformation Security Analyst III - Q Clearance RequiredSummary:We are seeking an experienced Information Security Analyst III to support the security, assessment, authorization, and continuous monitoring of government systems and information assets. The ideal... 

    ActioNet

    Vienna, VA
    2 days ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to RMF/Assessment & Authorization (A&A) Analyst. Be the first to apply!