Cloud Security Information Security Risk Analyst

Booz Allen Hamilton•McLean, VA

15h•$99,000 - $225,000•Onsite

About The Position

The Cloud Security Information Security Risk Analyst serves as a mid- to senior-level cybersecurity specialist supporting DoW cloud modernization and ongoing sustainment activities. The analyst defines, communicates, and implements cybersecurity architecture and security assurance processes for systems operating in Microsoft Azure and Amazon Web Services (AWS) across Impact Level (IL) 2 and IL5 cloud environments. They work as a core member of a 6–8 person Cybersecurity Team, collaborating closely with the team lead, system engineers, and project managers to ensure secure design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains. The analyst owns and executes full lifecycle Risk Management Framework (RMF) activities—including A&A documentation, security control assessment, and support for achieving and maintaining Authority to Operate (ATO). You will leverage communication and briefing skills, as you will regularly engage with and present security findings to DoW leadership.

Requirements

4+ years of experience securing computer systems, performing DoD authorization activities, and writing RMF security documentation
4+ years of experience with secure cloud architecture, preferably in Azure or AWS
Experience developing RMF Body of Evidence for DoD systems
Experience with compliance tools such as ACAS, SCAP, STIG Viewer, SRGs, or eMASS
Experience with scripting or automation such as Bash for scanning, monitoring, or compliance support
Experience supporting security reviews within DevSecOps pipelines and recurring release cycles
Experience with RMF terminology, A&A processes, and federal cybersecurity regulations
TS/SCI clearance
HS diploma or GED
DoD 8570/8140 IAT Level II Certification

Nice To Haves

Experience securing IL2 and IL5 cloud architectures and hybrid on‑prem and cloud connections
Experience with continuous monitoring solutions and Agile-based workflows
Experience in Red Hat Enterprise Linux (RHEL) or Windows system administration
Experience as a ISSO or ISSE in DoD or federal programs
Experience generating A&A artifacts under NIST SP 800‑53, DoD RMF, or ICD 503
Knowledge of IT system development, acquisition, and sustainment in federal environments
Bachelor's degree preferred

Responsibilities

Defines, communicates, and implements cybersecurity architecture and security assurance processes for systems operating in Microsoft Azure and Amazon Web Services (AWS) across Impact Level (IL) 2 and IL5 cloud environments.
Works as a core member of a 6–8 person Cybersecurity Team, collaborating closely with the team lead, system engineers, and project managers to ensure secure design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains.
Owns and executes full lifecycle Risk Management Framework (RMF) activities—including A&A documentation, security control assessment, and support for achieving and maintaining Authority to Operate (ATO).
Leverages communication and briefing skills to regularly engage with and present security findings to DoW leadership.