Cybersecurity Analyst, Junior

Booz Allen Hamilton•Rome, NY

8d•$52,900 - $108,000

About The Position

As a Cybersecurity Risk Analyst, you will apply cybersecurity and cyberspace operations experience to support Department of Defense Risk Management Framework (RMF) guidance, Security Test and Evaluation (ST&E), system vulnerability and compliance activities, and Assessment and Authorization (A&A) throughout the System Development Life Cycle (SDLC). You will help assess cyberspace capabilities, identify potential weaknesses, and evaluate the effectiveness of cybersecurity mitigations. You will work with a team to use cyberspace operations systems to aggregate threat feeds and inform briefings for senior leadership. Your work will support research into emerging technologies, security requirements, and threats, as well as the development of approaches that meet organizational goals. You will collaborate with headquarters-level decision makers on technical solutions that sustain cybersecurity across multiple technology areas. The role also involves researching and analyzing adversarial tactics, techniques, and procedures; supporting system A&A through cyber risk assessments, policy analysis, technology evaluations, and NIST security control validation; analyzing system and application security implementations; and providing recommendations to decision makers and engineers. You will contribute to the development of operation plans supporting command and control.

Requirements

Experience in a cybersecurity or computer field, including supporting information assurance, networking, or systems administration.
Experience applying system security configurations to meet compliance standards.
Knowledge of cybersecurity standards and implementation of industry best practices.
Knowledge of risk management practices.
Ability to create written or verbal communication products for review.
Ability to obtain a Secret clearance.
Associate’s degree.

Nice To Haves

Experience with RMF A&A processes and cybersecurity engineering.
Experience working with the Enterprise Mission Assurance Support Service (eMASS).
Experience with cloud and DevSecOps.
Knowledge of STIG and compliance scans.
Excellent time management and analytical skills.
Possession of a Secret clearance.
Security+ CE certification.

Responsibilities

Apply DoD RMF guidance, ST&E, system vulnerability, and compliance practices in support of A&A throughout the SDLC.
Assess cyberspace capabilities to identify potential weaknesses and evaluate the effectiveness of cybersecurity mitigations.
Aggregate threat feeds using cyberspace operations systems and develop briefings for senior leadership.
Research emerging technology, security requirements, and threats, and help develop approaches to meet organizational goals.
Support headquarters-level decision makers with technical implementation of solutions that sustain cybersecurity across multiple technology areas.
Assess and communicate adversarial tactics, techniques, and procedures to operators, senior leadership, and commanders.
Support system A&A through cyber risk assessments, policy analysis, technology evaluations, and NIST security control validation.
Analyze system security implementations and application security, and provide recommendations to decision makers and engineers.
Contribute to operation plans supporting command and control.