Cybersecurity Analyst, Junior

Booz Allen Hamilton•Usa, NY

2d•$52,900 - $108,000

About The Position

As a Cybersecurity Risk Analyst at Booz Allen, you will apply cybersecurity and cyberspace operations experience to support cybersecurity risk assessment and Assessment and Authorization (A&A) across the System Development Life Cycle (SDLC). You will assess system vulnerabilities and mitigation effectiveness, analyze system security implementations and application security, and recommend solutions to decision makers and engineers. You will work with a team to aggregate threat feeds and prepare briefings for senior leadership, research emerging technologies, security requirements, and threats, and support organizational goals. The role involves working with headquarters-level decision makers on technical implementations that sustain cybersecurity across multiple technology areas. You will inform operators, senior leaders, and commanders about adversarial tactics, techniques, and procedures, and support A&A through cyber risk assessment, policy analysis, technology evaluations, and NIST security control validation. You will also contribute to operational plans supporting command and control.

Requirements

Experience in a cybersecurity or computer field, including information assurance, networking, or systems administration.
Experience applying system security configurations to meet compliance standards.
Knowledge of cybersecurity standards and implementation of industry best practices.
Knowledge of risk management practices.
Ability to obtain a Secret clearance.
Ability to create written or verbal communication products for review.
Scheduled to obtain a Bachelor's degree by Spring 2027.

Nice To Haves

Experience with RMF A&A processes and cybersecurity engineering.
Experience working with the Enterprise Mission Assurance Support Service (eMASS).
Experience with cloud and DevSecOps.
Knowledge of STIG and compliance scans.
Excellent verbal and written communication skills.
Excellent time management and analytical skills.
Possession of a Secret clearance.
Security+ CE certification.

Responsibilities

Support DoD Risk Management Framework guidance, Security Test and Evaluation, vulnerability assessment, and compliance activities for Assessment and Authorization throughout the SDLC.
Assess cybersecurity capabilities, system weaknesses, and the effectiveness of mitigations.
Aggregate threat feeds and develop briefings for senior leadership.
Research emerging technologies, security requirements, and threats, and help develop approaches to meet organizational goals.
Work with headquarters-level decision makers on technical implementations that promote cybersecurity sustainment across multiple technology areas.
Assess and communicate adversarial tactics, techniques, and procedures to operators, senior leadership, and commanders.
Support system A&A through cyber risk assessment, policy analysis, technology evaluations, and NIST security control validation.
Analyze system security implementations and application security, and provide recommendations to decision makers and engineers.
Contribute to the development of operational plans supporting command and control.