Cloud Security Information Security Risk Analyst

Booz Allen Hamilton • McLean, VA

2d

About The Position

The Cloud Security Information Security Risk Analyst is a mid- to senior-level cybersecurity specialist supporting Department of War (DoW) cloud modernization and sustainment. The role defines, communicates, and implements cybersecurity architecture and security assurance processes for systems operating in Microsoft Azure and Amazon Web Services across IL2 and IL5 cloud environments. As part of a 6–8 person Cybersecurity Team, the analyst collaborates with the team lead, system engineers, and project managers to support secure design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains.

The analyst owns and executes full lifecycle Risk Management Framework (RMF) activities, including assessment and authorization documentation, security control assessments, and support for achieving and maintaining Authority to Operate (ATO). The role also involves communicating and presenting security findings to DoW leadership.

Requirements

• At least 4 years of experience securing computer systems, performing DoD authorization activities, and writing RMF security documentation.
• At least 4 years of experience with secure cloud architecture, preferably in Azure or AWS.
• Experience developing RMF Body of Evidence for DoD systems.
• Experience with compliance tools such as ACAS, SCAP, STIG Viewer, SRGs, or eMASS.
• Experience with scripting or automation, such as Bash, for scanning, monitoring, or compliance support.
• Experience supporting security reviews within DevSecOps pipelines and recurring release cycles.
• Experience with RMF terminology, A&A processes, and federal cybersecurity regulations.
• TS/SCI clearance is required.
• High school diploma or GED.
• DoD 8570/8140 IAT Level II certification.

Nice To Haves

• Experience securing IL2 and IL5 cloud architectures and hybrid on-premises and cloud connections.
• Experience with continuous monitoring solutions and Agile-based workflows.
• Experience in Red Hat Enterprise Linux (RHEL) or Windows system administration.
• Experience as an ISSO or ISSE in DoD or federal programs.
• Experience generating A&A artifacts under NIST SP 800-53, DoD RMF, or ICD 503.
• Knowledge of IT system development, acquisition, and sustainment in federal environments.
• Bachelor's degree.

Responsibilities

• Define, communicate, and implement cybersecurity architecture and security assurance processes for Azure and AWS systems.
• Support secure design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains.
• Own and execute full lifecycle RMF activities, including A&A documentation and security control assessments.
• Support systems in achieving and maintaining Authority to Operate (ATO).
• Collaborate with the Cybersecurity Team lead, system engineers, and project managers.
• Engage with and present security findings to DoW leadership.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED