Senior Security Analyst, ATO / RMF (Active TS/SCI Clearance) with Security Clearance

Clearance: Active TS/SCI required; CI Polygraph preferred but not required

• Develop and maintain ATO security packages and authorization documentation
• Write clear technical documentation describing how systems are configured, secured, and operated
• Work across the RMF lifecycle, including Categorize, Select, Implement, Assess, Authorize, and Monitor
• Assess security controls against NIST 800-53 requirements
• Analyze STIG and SCAP requirements and document compliance
• Review vulnerability scans and identify security weaknesses within customer environments
• Interpret results from tools such as Tenable Nessus, Checkmarx, and Fortify
• Develop, manage, and update Plans of Action & Milestones (POA&Ms)
• Track vulnerabilities through remediation, mitigation, or risk acceptance
• Identify and help customers remediate open-day vulnerabilities
• Evaluate configuration changes and their impact on the security posture of enterprise cloud solutions
• Recommend mitigating controls and security countermeasures
• Support continuous monitoring following authorization
• Maintain security documentation as customer environments and requirements evolve
• Explain security-control inheritance models and associated resources
• Prepare documentation for system audits and vulnerability assessments
• Communicate cybersecurity risk and remediation recommendations to technical teams and senior leadership

• Understand customer systems, architectures, and business requirements
• Translate technical environments into appropriate security controls and authorization requirements
• Advise customers on security best practices and required remediation
• Identify technical and cybersecurity risks and recommend mitigation strategies
• Participate in project planning and identify risks, dependencies, and deliverables
• Develop project artifacts and support Work Breakdown Structures (WBS)
• Communicate project status, risks, and technical requirements to project leadership
• Provide guidance and technical leadership to customers and less-experienced security staff

• Experience supporting solutions used by U.S. government agencies and/or military organizations
• Strong experience with ATO writing, security documentation, and package development
• Hands-on knowledge of the Risk Management Framework (RMF)
• Understanding of all RMF lifecycle steps
• Experience assessing security controls against NIST 800-53
• Experience developing and managing POA&Ms
• Ability to understand and explain security-control inheritance

• Experience reviewing and interpreting vulnerability scans
• Knowledge of STIGs and SCAP
• Experience with vulnerability and application-security tools such as Tenable Nessus, Checkmarx, Fortify, or similar platforms
• Ability to recommend appropriate countermeasures and mitigating controls
• Experience supporting continuous monitoring and compliance reporting

• Understanding of cloud security controls, configurations, and compliance requirements
• Ability to evaluate configuration changes and determine their potential security impact
• Familiarity with firewalls, network security, and intrusion detection systems (IDS) in cloud environments is preferred

• Ability to explain cybersecurity risks and requirements to both technical and non-technical stakeholders
• Comfortable leading customer meetings and technical discussions
• Ability to translate cybersecurity findings into actionable remediation recommendations
• Self-motivated and comfortable working within a small, agile technical team

• CI Polygraph preferred but not required
• Active Security+ or higher IAT Level II/III certification required
• CISSP or similar information security certification preferred
• Cloud security or platform certifications are a plus
• Bachelor’s degree preferred

• Helps accelerate the delivery of new technologies into DoD and Intelligence Community environments
• Works across cloud security, ATO, RMF, vulnerability management, and continuous monitoring
• Provides hands-on guidance throughout the authorization lifecycle
• Has direct impact on getting new technology into the hands of government and military users

• rewards package, including a market competitive salary along with:
• Comprehensive medical, dental, and vision coverage; HSA-eligible plan options available
• 401(k) retirement plan with company match (vesting schedule per Plan Document)
• Paid Time Off, federal holidays, and floating holiday for personal observance
• Annual professional development support for AWS certifications, training, and conferences
• Employee referral program where applicable and documented by program policy
• Life, AD&D, and short- / long-term disability insurance
• Telework and flexible-schedule support where mission and contract permit
• Mission-focused federal contractor supporting national-security customers Target Salary Range: $140,000-195,000.

Actual salary will be based on a combination of factors, including the position’s scope and level of responsibility, the candidate’s relevant experience, education, technical expertise, skills and qualifications, geographic location, and applicable business or contractual requirements.

Equal Employment Opportunity

Accommodations

SBS does not accept unsolicited resumes from staffing agencies. Any resumes submitted without a prior agreement will be considered the property of SBS. Apply Now

Share This Job