Cloud Security Information Security Risk Analyst

Booz Allen Hamilton•McLean, VA

7d•$99,000 - $225,000

About The Position

The Cloud Security Information Security Risk Analyst is a mid- to senior-level cybersecurity specialist supporting Department of War (DoW) cloud modernization and sustainment. The analyst defines, communicates, and implements cybersecurity architecture and security assurance processes for systems operating in Microsoft Azure and Amazon Web Services (AWS) across IL2 and IL5 cloud environments. As part of a 6-to-8-person Cybersecurity Team, the analyst collaborates with the team lead, system engineers, and project managers to secure the design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains. The role owns and executes full-lifecycle Risk Management Framework (RMF) activities, including authorization and accreditation documentation, security control assessments, and support for achieving and maintaining an Authority to Operate (ATO). The analyst regularly communicates and briefs DoW leadership on security findings. Applicants must hold a Top Secret clearance, a high school diploma or GED, and a DoD 8570 or 8140 IAT Level II certification. The position offers an annualized projected compensation range of $99,000 to $225,000. Booz Allen describes benefits including health, life, disability, financial and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards. Full-time and part-time employees regularly working at least 20 hours per week are eligible to participate in benefit programs, subject to program terms.

Requirements

Experience securing systems, performing authorization activities, and writing RMF security documentation.
Experience with secure cloud architectures such as Azure or AWS.
Experience developing RMF Body of Evidence for federal systems.
Experience with compliance tools such as Nessus, ACAS, SCAP, STIG Viewer, SRGs, or eMASS.
Experience with scripting or automation such as Bash for scanning, monitoring, or compliance support.
Experience supporting security reviews within DevSecOps pipelines and recurring release cycles.
Experience with RMF terminology, A&A processes, and federal cybersecurity regulations.
Top Secret clearance.
High school diploma or GED.
DoD 8570 or 8140 IAT Level II certification.

Nice To Haves

Experience securing IL2 and IL5 cloud architectures and hybrid on-premises and cloud connections.
Experience with continuous monitoring solutions and Agile-based workflows.
Experience in Red Hat Enterprise Linux (RHEL) or Windows system administration.
Experience as an ISSO or ISSE in DoD or federal programs.
Experience generating A&A artifacts under NIST SP 800-53, DoD RMF, or ICD 503.
Knowledge of IT system development, acquisition, and sustainment in federal environments.
Bachelor's degree.

Responsibilities

Define, communicate, and implement cybersecurity architecture and security assurance processes for Azure and AWS systems in IL2 and IL5 cloud environments.
Collaborate with the Cybersecurity Team, team lead, system engineers, and project managers to support secure cloud solution design, implementation, verification, and continuous monitoring across multiple network domains.
Own and execute full-lifecycle RMF activities, including A&A documentation and security control assessments.
Support achievement and maintenance of Authority to Operate (ATO).
Present security findings to DoW leadership.
Support security reviews within DevSecOps pipelines and recurring release cycles.
Use scripting or automation to support scanning, monitoring, or compliance activities.