Security Assessment and Authorization Analyst

- Lead and support Assessment and Authorization (A&A) initiatives for diverse agency systems, including those in cloud environments (AWS, Azure) - Assist federal clients in navigating the ATO process for new and upgraded systems, ensuring adherence to NIST standards and RMF - Develop and manage the preparation of ATO documentation, such as: - System Security Plans (SSP) - Security Assessment Reports (SAR) - Risk Assessment Memos for Risk-Based Decisions - Continuous Monitoring Plans - Management of Plan of Action and Milestones (POA&M) - Conduct assessments on control implementation and validate statements against NIST SP 800-53 requirements - Test and verify security controls, pinpoint gaps, and oversee remediation via POA&M tracking - Create and sustain a comprehensive Risk Register, notifying stakeholders on high-risk areas - Facilitate Incident Response (IR) and Contingency Plan (CP) testing, delivering prompt updates and recommendations - Conduct stakeholder interviews and exit meetings to review and discuss identified findings - Provide pre-submission review of ATO packages for CISO and CIO approval - Design and implement security measures to bolster the security posture of systems and environments - Perform security assessments on security perimeters and generate necessary security documentation - Utilize automation and artificial intelligence (AI) technologies to improve efficiency in A&A processes