Cybersecurity Analyst, Mid

Booz Allen Hamilton•Washington, DC

18h•$62,000 - $141,000•Onsite

About The Position

As an Information Security Risk Specialist, you will work with government clients to identify cyber risks, understand applicable policies, and develop mitigation plans. You will gather technical, environmental, and personnel details from subject-matter experts and customers to assess the threat landscape, then guide clients through action plans using presentations, whitepapers, and milestones. You will translate security concepts so clients can make informed decisions to secure mission-critical systems. The role offers an opportunity to contribute to information security while developing skills in cybersecurity policy and compliance.

Requirements

5+ years of experience with security control assessments, information security compliance, or security assessment and authorization.
Experience conducting NIST security control assessments on traditional and cloud systems.
Experience creating and maintaining A&A documentation such as FIPS-199, SSPs, POA&Ms, and SARs.
Experience with cloud environments such as AWS, Azure, M365, and SaaS applications, and associated security controls.
Knowledge of federal cybersecurity frameworks and standards, including NIST SP 800-53, Risk Management Framework (RMF), FISMA, and FedRAMP.
Ability to work independently on multiple projects simultaneously.
Public Trust determination is required; selected applicants are subject to a government investigation and may need to meet U.S. government client eligibility requirements.
High school diploma or GED.

Nice To Haves

Experience with cybersecurity supporting U.S. government programs.
Excellent interpersonal skills.
Excellent verbal and written communication skills.
Bachelor’s degree in a Cybersecurity, Information Systems, Computer Science, or Engineering field.
Industry-recognized cybersecurity certifications.

Responsibilities

Work with government clients to discover cyber risks, understand applicable policies, and develop mitigation plans.
Gather technical, environmental, and personnel details from subject-matter experts and customers to assess the threat landscape.
Guide clients through plans of action using presentations, whitepapers, and milestones.
Translate security concepts for clients to support decisions about securing mission-critical systems.