Security Assessment & Authorization Analyst
US$102,000 – US$115,000 / yr base salary
Posted 11 Sep 2026
Advertised as “Security Assessment & Authorization (SA&A) Analyst (Job 1453)”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 3+ yrs
- Management level
- Individual contributor
| Base salary | US$102,000 – US$115,000 / yr |
|---|
CertificationsCGRC (CAP), CISA, Security+, CISSP
Field of studyCybersecurity, Information Technology (or related)
Study levelBachelor's
About Us
DLH delivers improved health and national security readiness solutions for federal programs through science, research and development, systems engineering and integration, and digital transformation. Our experts in public health, performance evaluation, and health operations solve the complex problems faced by civilian and military customers alike by leveraging advanced tools – including digital transformation, artificial intelligence, data analytics, cloud enablement, modeling, and simulation, and more. DLH is dedicated to the idea that “Your Mission is Our Passion” and brings a unique combination of government sector experience, proven methodology, and unwavering commitment to innovation to improve the lives of millions.
Overview
DLH is seeking a Security Assessment & Authorization Analyst to join our team. The Security Assessment & Authorization Analyst is responsible for developing and maintaining Authority to Operate (ATO) security packages and authorization documentation and working across the Risk Management Framework (RMF) lifecycle for assigned systems. You will have worked with customers to understand technologies, develop security documentation, assess vulnerabilities, document and implement security controls, manage POA&Ms, and help move solutions successfully through authorization. The ideal candidate will have experience developing ATO packages, be knowledgeable about RMF, and enjoy working across diverse teams to solve cybersecurity and compliance challenges.
Responsibilites
- Support the development and maintenance of ATO security packages and authorization documentation
- Assess security controls to ensure compliance with NIST 800-53 requirements
- Develop, manage, and update Plans of Action & Milestones (POA&Ms)
- Analyze STIG and SCAP requirements to ensure document compliance
- Track vulnerabilities through remediation, mitigation, and/or risk acceptance
- Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems
- Recommend mitigating controls and countermeasures
- Strong knowledge of security standards and best practices.
- Excellent problem-solving and analytical skills.
- Strong cross-team collaboration and coordination across diverse audiences and stakeholders
Qualifications
- Bachelor’s degree in information technology, Cybersecurity, or a related field
- Minimum of three (3) years of experience in developing and maintaining ATO security packages and helping customers with the RMF and ATO lifecycle