Cybersecurity Analyst, Mid

Booz Allen Hamilton•Washington, DC

About The Position

As an Information Security Risk Specialist on our team, you’ll work with our government clients to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from SMEs and customers to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission critical systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity policy and compliance. Join us as we protect our client's critical information systems. Join us. The world can’t wait.

Requirements

5+ years of experience with security control assessments, information security compliance, or security assessment and authorization
Experience conducting NIST security control assessments on traditional and cloud systems
Experience creating and maintaining A&A documentation such as FIPS-199, SSPs, POA&Ms, and SARs
Experience with cloud environments such as AWS, Azure, M365, and SaaS applications, and associated security controls
Knowledge of federal cybersecurity frameworks and standards, including NIST SP 800-53, Risk Management Framework (RMF), FISMA, and FedRAMP
Ability to work independently on multiple projects simultaneously
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Bachelor’s degree

Nice To Haves

Experience with cybersecurity supporting U.S. government programs
Possession of excellent interpersonal skills
Possession of excellent verbal and written communication skills
Bachelor’s degree in a Cybersecurity, Information Systems, CS, or Engineering field
Industry-recognized Cybersecurity Certifications

Responsibilities

Discover their cyber risks
Understand applicable policies
Develop a mitigation plan
Assess the entire threat landscape
Guide your client through a plan of action with presentations, whitepapers, and milestones
Translate security concepts for your client so they can make the best decisions to secure their mission critical systems