Cloud Security Information Security Risk Analyst

Booz Allen Hamilton•McLean, VA

6d•$99,000 - $225,000•Onsite

About The Position

The Cloud Security Information Security Risk Analyst is a mid- to senior-level cybersecurity specialist supporting DoW cloud modernization and sustainment. The role defines, communicates, and implements cybersecurity architecture and security assurance processes for systems operating in Microsoft Azure and Amazon Web Services (AWS) across IL2 and IL5 cloud environments. The analyst is part of a 6-to-8-person Cybersecurity Team and collaborates with the team lead, system engineers, and project managers to secure the design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains. The role owns and executes full lifecycle Risk Management Framework (RMF) activities, including A&A documentation, security control assessment, and support for achieving and maintaining Authority to Operate (ATO). The analyst regularly communicates and presents security findings to DoW leadership.

Requirements

Experience securing systems, performing authorization activities, and writing RMF security documentation.
Experience with secure cloud architectures such as Azure or AWS.
Experience developing RMF Body of Evidence for federal systems.
Experience with compliance tools such as Nessus, ACAS, SCAP, STIG Viewer, SRGs, or eMASS.
Experience with scripting or automation such as Bash for scanning, monitoring, or compliance support.
Experience supporting security reviews within DevSecOps pipelines and recurring release cycles.
Experience with RMF terminology, A&A processes, and federal cybersecurity regulations.
Top Secret clearance.
High school diploma or GED.
DoD 8570 or 8140 IAT Level II Certification.

Nice To Haves

Experience securing IL2 and IL5 cloud architectures and hybrid on-premises and cloud connections.
Experience with continuous monitoring solutions and Agile-based workflows.
Experience in Red Hat Enterprise Linux (RHEL) or Windows system administration.
Experience as an ISSO or ISSE in DoD or federal programs.
Experience generating A&A artifacts under NIST SP 800-53, DoD RMF, or ICD 503.
Knowledge of IT system development, acquisition, and sustainment in federal environments.
Bachelor's degree.

Responsibilities

Define, communicate, and implement cybersecurity architecture and security assurance processes for Azure and AWS systems in IL2 and IL5 environments.
Support secure design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains.
Execute full lifecycle RMF activities, including A&A documentation and security control assessment.
Support achievement and maintenance of Authority to Operate (ATO).
Collaborate with the Cybersecurity Team lead, system engineers, and project managers.
Communicate and present security findings to DoW leadership.
Support security reviews within DevSecOps pipelines and recurring release cycles.