Cybersecurity Analyst, Mid

Booz Allen Hamilton•Usa, DC

1d•Remote

About The Position

This role is for an Information Security Risk Specialist who will help government clients understand and mitigate cyber threats. The specialist will work to discover cyber risks, understand applicable policies, and develop mitigation plans. This involves gathering technical, environmental, and personnel details from Subject Matter Experts (SMEs) and customers to assess the threat landscape. The specialist will then guide clients through action plans using presentations, whitepapers, and milestones, translating complex security concepts to help them make informed decisions to secure mission-critical systems. This position offers an opportunity to take an active role in information security and grow skills in cybersecurity policy and compliance.

Requirements

5+ years of experience with security control assessments, information security compliance, or security assessment and authorization
Experience conducting NIST security control assessments on traditional and cloud systems
Experience creating and maintaining A & A documentation such as FIPS-199, SSPs, POA & Ms, and SARs
Experience with cloud environments such as AWS, Azure, M365, and SaaS applications, and associated security controls
Knowledge of federal cybersecurity frameworks and standards, including NIST SP 800-53, Risk Management Framework (RMF), FISMA, and FedRAMP
Ability to work independently on multiple projects simultaneously
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Bachelor’s degree in a Cybersecurity, Information Systems, CS, or Engineering field

Nice To Haves

Experience with cybersecurity supporting U.S. government programs
Possession of excellent interpersonal skills
Possession of excellent verbal and written communication skills
Industry-recognized Cybersecurity Certifications

Responsibilities

Work with government clients to discover their cyber risks
Understand applicable policies related to cyber risks
Develop mitigation plans for cyber risks
Gather technical, environmental, and personnel details from SMEs and customers to assess the entire threat landscape
Help guide clients through a plan of action with presentations, whitepapers, and milestones
Translate security concepts for clients to help them make the best decisions to secure their mission critical systems
Take an active role in information security
Protect client's critical information systems