Security Assessment & Authorization (SA&A) Analyst, Sr (Job 1457)

The role

The Sr. Security Assessment & Authorization Analyst develops and maintains Authority to Operate (ATO) security packages and authorization documentation. This role works across the Risk Management Framework (RMF) lifecycle for assigned systems.

What you will do

• Develop and maintain ATO security packages and authorization documentation
• Assess security controls to ensure compliance with NIST 800-53 requirements
• Assist customers in obtaining Authority to Operate security packages
• Develop, manage, and update Security Plans of Action & Milestones (POA&Ms)
• Analyze STIG and SCAP requirements to ensure document compliance
• Track vulnerabilities through remediation, mitigation, and/or risk acceptance
• Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems
• Recommend mitigating controls and countermeasures

Required qualifications

• Minimum of eight (8) years of experience in developing and maintaining ATO security packages
• Experience developing clear, concise documentation describing system configuration, operations, and security controls
• Prior experience working with security tools such as Tenable, Splunk, and GRC JCAM
• Strong knowledge of Federal security guidelines, standards, and control frameworks (such as NIST SP 800-53)
• Bachelor’s degree in information technology, Cybersecurity, or a related field
• Relevant certifications (e.g., CGRC (CAP), CISA, CompTIA Security+, CISSP) required
• Strong knowledge of security standards and best practices
• Excellent problem-solving and analytical skills
• Strong cross-team collaboration and coordination with 3 rd parties is required

Nice to have

• Prior experience with Cloud Security (AWS, Azure, GCP) within a large government environment (FedRAMP certified)

Benefits

• Personal Time Off (PTO)
• medical
• dental
• vision
• supplemental life with AD&D
• disability coverage
• flexible spending accounts
• 401(k) Retirement Plan with a matching component
• training
• access to e-learning suite
• professional and technical certification preparation
• education assistance at accredited institutions

Before you apply

• Must be able to obtain a Public Trust clearance

About the company

DLH delivers improved health and national security readiness solutions for federal programs through science research and development, systems engineering and integration, and digital transformation. The company leverages advanced tools including digital transformation, artificial intelligence, data analytics, cloud enablement, modeling, and simulation.