Assessment and Authorization Analyst
We are seeking an Assessment and Authorization Analyst to join our Prime Contract with the Defense Threat Reduction Agency. TekSynap is a fast-growing high-tech company focused on delivering comprehensive information management solutions to meet the business needs of our Federal Government customers.
Responsibilities
- Act as an independent, impartial assessor to determine, evaluate, and certify aggregate cybersecurity risk, presenting formal risk recommendation packages to the Security Control Assessor (SCA).
- Assist federal agency stakeholders in managing operational risks associated with both on-prem and cloud-based information systems utilizing the standardized DoD RMF lifecycle.
- Conduct formal security control validation and technical assessments of system features to identify, address, and remediate known vulnerabilities and emerging threats.
- Perform technical vulnerability analyses, evaluate existing risk mitigation strategies, and determine appropriate residual risk postures for candidate systems.
- Maintain traceability of all technical vulnerabilities from raw system assessment results (such as ACAS and SCAP scans) through to the Plan of Action and Milestones (POA&M).
- Author, review, and maintain core RMF authorization artifacts, including the Risk Assessment Report (RAR) and POA&M, ensuring accurate reflection of assessment outcomes.
- Advise the Authorizing Official Designated Representative (AODR), Authorizing Official (AO), and Chief Information Security Officer (CISO) on RMF compliance matters, technical security controls, and authorization packages.
- Author concise, coherent technical narratives explaining complex control failures, security compliance gaps, and remediation strategies to functional leaders and executive stakeholders.
- Utilize Enterprise Mission Assurance Support Service (eMASS) software to manage, upload, track, and process RMF security packages for national security systems (NSS) and non-NSS environments.
- Run, evaluate, and analyze Assured Compliance Assessment Solution (ACAS) Security Center vulnerability/discovery scans, Security Technical Implementation Guide (STIG) Checklists via STIG Viewer, and SCAP compliance tool outputs.
Requirements
- Active Top-Secret clearance with SCI eligibility required.
- DoD 8570/8140 IAM Level II certification.
- Minimum 8 to 10 years of progressive cybersecurity assessment and authorization experience with a Bachelor’s degree (or 6 to 8 years with a Master’s degree, or 3 to 5 years with a PhD).
- Bachelor’s degree in a relevant field.
- Documented eMASS training and practical hands-on experience managing RMF packages.
Benefits
- Health, dental, and vision insurance.
- 401K retirement plan.
- Life insurance.
- Short-term and long-term disability plans.
- Paid vacation time and holidays.
Pay
Target salary range: $140,000.00 - $170,000.00. The salary range displayed is an estimate and will be determined based on the individual’s education, knowledge, skills, competencies, experience, contract parameters, and organizational requirements.
Schedule
- Day shift, Monday – Friday.
- May be requested to work evenings and weekends to meet program and contract needs.
- Less than 10% travel required.
Work Environment and Physical Demands
The work environment is an office setting with low noise levels. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
- Regularly required to use hands, reach with hands and arms, talk, and hear.
- Regularly required to stand, walk, sit, climb or balance, and stoop, kneel, crouch, or crawl.
- Regularly required to lift up to 10 pounds, frequently lift up to 25 pounds, and occasionally lift up to 50 pounds.
- Vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.
U.S. Citizenship is required. Employees must comply with any vaccination requirements mandated by contract, applicable law, or regulation.