Cybersecurity Analyst, Mid

Booz Allen Hamilton • Washington, DC

1d • $62,000 - $141,000

About The Position

As an Information Security Risk Specialist, you will work with government clients to identify cyber risks, understand applicable policies, and develop mitigation plans. You will gather technical, environmental, and personnel details from subject-matter experts and customers to assess the threat landscape. You will help guide clients through plans of action using presentations, whitepapers, and milestones, translating security concepts so clients can make informed decisions to secure mission-critical systems. The role offers an opportunity to contribute to information security while developing skills in cybersecurity policy and compliance.

Requirements

• At least 5 years of experience with security control assessments, information security compliance, or security assessment and authorization.
• Experience conducting NIST security control assessments on traditional and cloud systems.
• Experience creating and maintaining assessment and authorization documentation, including FIPS-199, SSPs, POA&Ms, and SARs.
• Experience with cloud environments such as AWS, Azure, M365, and SaaS applications, and their associated security controls.
• Knowledge of federal cybersecurity frameworks and standards, including NIST SP 800-53, the Risk Management Framework (RMF), FISMA, and FedRAMP.
• Ability to work independently on multiple projects simultaneously.
• Public Trust determination is required; applicants are subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.
• High school diploma or GED.

Nice To Haves

• Experience supporting U.S. government programs in cybersecurity.
• Excellent interpersonal skills.
• Excellent verbal and written communication skills.
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or an Engineering field.
• Industry-recognized cybersecurity certifications.

Responsibilities

• Identify government clients’ cyber risks and understand applicable policies.
• Gather technical, environmental, and personnel information from subject-matter experts and customers to assess threats.
• Develop and guide clients through plans of action to mitigate risks.
• Communicate security concepts and recommendations through presentations, whitepapers, and milestones.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED