Cybersecurity Analyst, Junior

Booz Allen Hamilton•Usa, NY

About The Position

As a Cybersecurity Risk Analyst, you will apply cybersecurity and cyberspace operations experience in support of Department of Defense Risk Management Framework (RMF) guidance, Security Test and Evaluation, system vulnerability and compliance, and Assessment and Authorization throughout the System Development Life Cycle. You will help evaluate cyberspace capabilities, identify potential weaknesses, and assess the effectiveness of mitigations. Working with a team, you will aggregate threat feeds to inform senior-leadership briefings and support research into emerging technology, security requirements, and threats. You will collaborate with headquarters-level decision makers on technical solutions that sustain cybersecurity across multiple technology areas. The role uses research and analysis to inform operators, senior leaders, and commanders about adversarial tactics, techniques, and procedures. Work supports system A&A through cyber risk assessments, policy analysis, technology evaluations, and NIST security control validation. You will analyze system security implementations and application security, make recommendations to decision makers and engineers, and contribute to operation plans supporting command and control.

Requirements

Experience in a cybersecurity or computer field, including supporting information assurance, networking, or systems administration.
Experience applying system security configurations to meet compliance standards.
Knowledge of cybersecurity standards and implementation of industry best practices.
Knowledge of risk management practices.
Ability to create written or verbal communication products for review.
Ability to obtain a Secret clearance.
Associate’s degree.

Nice To Haves

Experience with RMF A&A processes and cybersecurity engineering.
Experience working with the Enterprise Mission Assurance Support Service (eMASS).
Experience with cloud and DevSecOps.
Knowledge of STIG and compliance scans.
Excellent time management and analytical skills.
Secret clearance.
Security+ CE certification.

Responsibilities

Support DoD RMF guidance, Security Test and Evaluation, system vulnerability and compliance, and Assessment and Authorization throughout the SDLC.
Evaluate cyberspace capabilities to identify potential weaknesses and assess the effectiveness of cybersecurity mitigations.
Aggregate threat feeds and prepare briefings for senior leadership.
Research emerging technology, security requirements, and emerging threats, and help develop ways forward to meet organizational goals.
Work with headquarters-level decision makers on technical implementation of cybersecurity solutions across multiple technology areas.
Assess and inform operators, senior leadership, and commanders about adversarial tactics, techniques, and procedures.
Support system A&A efforts through cyber risk assessment, policy analysis, technology evaluations, and NIST security control validation.
Analyze system security implementations and application security, and provide recommendations to decision makers and engineers.
Contribute to the development of operation plans supporting command and control.