Cybersecurity Risk Management Framework Analyst

Booz Allen Hamilton•Norfolk, VA

13d

About The Position

Cybersecurity Risk Management Framework Analyst The Opportunity: As a cybersecurity professional, you know that understanding adversary tactics, techniques, and procedures is vital to producing the intel that enables the success of operational test and evaluation (OT&E) for the Navy as it tests new capabilities introduced to the fleet. At Booz Allen, you can apply your skills and broad knowledge to inform strategies and mitigate the most pressing vulnerabilities. Here, you aren’t just deciphering reports, you’re telling the story to inform the U.S. Navy's most far-reaching cybersecurity vulnerabilities. As a Cybersecurity Risk Management Framework (RMF) Analyst on our team, you’ll support cyber OT&E missions by applying expertise in enterprise and system-level security design throughout the development lifecycle, ensuring alignment with evolving laws, regulations, and DoD and DON cybersecurity policies. Your responsibilities include translating complex technical and environmental requirements into effective security architectures and contributing to RMF efforts across all steps. You will assist in system categorization, policy documentation, control selection, and control implementation, and perform comprehensive assessments of management, operational, and technical security controls to evaluate their effectiveness. Additional duties include RMF support outlined in the RMF Process Guide (RPG), and providing project management and subject matter expertise to guide certification and accreditation activities for OT&E test infrastructure and toolsets, working closely with internal stakeholders and external oversight organizations to ensure timely and compliant system approvals. In this role, you’ll impact the U.S. Navy's acquisition decisions by evaluating a new fleet system's network environment for new and evolving threats, analyzing integrated Validated Online Lifecycle Threat (VOLT) reports with all-source intelligence, conducting cyber ethical hacking activities to test a system's cyber resiliency, supporting damage assessment activities to assess adversary capabilities, and reporting these results to U.S. Navy Operational Test personnel. Booz Allen is committed to creating an environment where you can expand your cyber career through mentoring, the opportunity to leverage new resources, and the ability to gain in-demand certifications to sharpen your skill set. With opportunities supporting both the private and public sectors across multiple geographies, your career is only limited by your own appetite for exploration. Work with us to secure our systems, networks, and crucial infrastructures. Join us. The world can’t wait.

Requirements

5+ years of experience designing and integrating enterprise and systems security throughout the development lifecycle
3+ years of experience conducting thorough assessments of RMF management, operational, and technical security controls within DoD IT systems
3+ years of experience providing project management and subject matter expertise for systems certification and accreditation efforts in accordance with DoD and DON cybersecurity policies and RMF guidance
Ability to travel up to 25% of the time
Secret clearance
Bachelor’s degree

Nice To Haves

Experience with testing and evaluation
TS/SCI clearance
Master's degree
Cybersecurity Certifications

Responsibilities

translating complex technical and environmental requirements into effective security architectures
contributing to RMF efforts across all steps
assisting in system categorization, policy documentation, control selection, and control implementation
performing comprehensive assessments of management, operational, and technical security controls to evaluate their effectiveness
RMF support outlined in the RMF Process Guide (RPG)
providing project management and subject matter expertise to guide certification and accreditation activities for OT&E test infrastructure and toolsets
evaluating a new fleet system's network environment for new and evolving threats
analyzing integrated Validated Online Lifecycle Threat (VOLT) reports with all-source intelligence
conducting cyber ethical hacking activities to test a system's cyber resiliency
supporting damage assessment activities to assess adversary capabilities
reporting these results to U.S. Navy Operational Test personnel