A&A Specialist
$64,000–$221,100 year
On-siteWashington, United States
Job Summary
Lead cybersecurity compliance for Federal/DoD systems as an Information System Security Officer (ISSO) and Assessment & Authorization (A&A) specialist, managing the full Risk Management Framework (RMF) lifecycle to achieve and maintain Authority to Operate (ATO). Implement and assess NIST SP 800-53 security controls, perform regular vulnerability scans, and develop required security authorization documentation while tracking remediation of identified findings. Conduct continuous security monitoring and periodic reviews to sustain the system's authorized security posture. Requires 2+ years of experience in information security/assurance including Federal/DoD RMF A&A; base pay range is $64,000—$221,100 USD.
Required Qualifications
- 2+ years of experience in information security/assurance (including Federal/DoD RMF A&A)
- Strong knowledge of RMF (NIST SP 800-37), NIST SP 800-53 controls, and FISMA compliance
- Proficient in implementing and assessing security controls, conducting vulnerability assessments and risk analysis, and managing security documentation (SSPs, POA&Ms, etc.)
- DoD 8570/8140 IAM Level II/III baseline certification (e.g., Security+ or equivalent)
Desired Qualifications
- Experience with cloud security (FedRAMP), high-impact or classified systems, and other specialized federal cybersecurity environments
- Familiarity with security compliance tools and GRC platforms; experience with automating continuous monitoring
- Advanced cybersecurity certifications preferred (e.g., CISSP, CAP, CISM)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.