Cybersecurity Analyst, Mid

Booz Allen Hamilton•Washington, DC

1d•$62,000 - $141,000

About The Position

Warnings about cyber threats are everywhere and the constantly evolving nature of these threats can make understanding them seem overwhelming to our clients. As an Information Security Risk Specialist on our team, you’ll work with our government clients to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from SMEs and customers to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission critical systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity policy and compliance. Join us as we protect our client's critical information systems.

Requirements

5+ years of experience with security control assessments, information security compliance, or security assessment and authorization
Experience conducting NIST security control assessments on traditional and cloud systems
Experience creating and maintaining A&A documentation such as FIPS-199, SSPs, POA&Ms, and SARs
Experience with cloud environments such as AWS, Azure, M365, and SaaS applications, and associated security controls
Knowledge of federal cybersecurity frameworks and standards, including NIST SP 800-53, Risk Management Framework (RMF), FISMA, and FedRAMP
Ability to work independently on multiple projects simultaneously
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Bachelor’s degree in a Cybersecurity, Information Systems, CS, or Engineering field

Nice To Haves

Experience with cybersecurity supporting U.S. government programs
Possession of excellent interpersonal skills
Possession of excellent verbal and written communication skills
Industry-recognized Cybersecurity Certifications

Responsibilities

Work with government clients to discover their cyber risks
Understand applicable policies
Develop a mitigation plan
Get technical, environmental, and personnel details from SMEs and customers to assess the entire threat landscape
Help guide clients through a plan of action with presentations, whitepapers, and milestones
Translate security concepts for clients so they can make the best decisions to secure their mission critical systems