Cybersecurity Assessment & Authorization (A&A) Engineer Analyst
Core
Conduct security assessments and authorizations for IT systems within the Risk Management Framework (RMF) lifecycle, including risk assessments, continuous monitoring, and accreditation package maintenance.
Role type
Cybersecurity Assessment & Authorization (A&A) Engineer Analyst
Builds
Comprehensive accreditation packages and authorization documentation for directed energy, electronic warfare, and security applications.
Domain
Defense/Security, Information Assurance, Risk Management Framework (RMF)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
RMF lifecycle management, STIG/SRG compliance, POA&M development, eMASS platform usage, ACAS scanning, security posture assessment, technical writing for security controls
Preferred skills
SSBI/T5 investigation clearance, DoD Cybersecurity Workforce (CSWF) certification, SSCP/CISSP certification, networking product expertise, database technology knowledge (MSSQL, MySQL, Oracle), DISA STIGs experience
Technologies
ACAS, SCAP, STIGs, SRGs, eMASS, MSSQL, MySQL, Oracle
Responsibilities
Perform self-assessments using applicable tools (ACAS, SCAP, STIGs, SRGs), interact with system owners on remediation activities, provide support on STIG/SRG requirements, develop POA&Ms, work in eMASS to manage assets and reports, respond to CCB requests, collaborate to create and maintain authorization documentation, provide weekly activity reports
Seniority
Mid-Senior level, hands-on IC