Independent Verification and Validation Analyst

Booz Allen Hamilton•Arlington, VA

10h•Remote

About The Position

The Independent Verification and Validation (IV&V) Analyst will play a strategic role in cyber analysis at the Department of Defense, utilizing experience-based knowledge to protect cyber assets. This position involves using extensive threat analysis skills to identify vulnerabilities. The analyst will correlate cyber vulnerabilities to customers’ cyber terrain using scanning technologies, apply technical knowledge of ACAS, HBSS, and Tanium to run scans, interpret tool reports, and communicate vulnerability statuses to subscribers and Risk Management Framework (RMF) practitioners to support system accreditation processes. Additionally, the role requires applying expertise in STIG fix text remediation to provide recommendations to customers and document them in executive reports. Support for IV&V efforts will be provided using automated and manual testing, examination, scanning, interviewing, and discovery techniques to identify, validate, and assess security vulnerabilities and deficiencies in information systems, including enclaves, networks, applications, services, software, and Platform IT (PIT).

Requirements

5+ years of experience with cybersecurity
Experience with Risk Management Framework
Experience running scans using ACAS, HBSS, or Tanium
Top Secret clearance
Bachelor’s degree
Ability to obtain a DoD 8570 IAT Level III or IAM Level II Certification within 90 days of start date

Nice To Haves

Experience with systems development, testing, creating, or reviewing technical documentation, CONOPS, TTPs, and developmental and operational Instructions
Experience with eMASS
Experience with Agile development methodologies
Ability to manage and prioritize multiple tasks simultaneously
TS/SCI clearance

Responsibilities

Correlate cyber vulnerabilities to customers’ cyber terrain using scanning technologies.
Apply technical knowledge of ACAS, HBSS, and Tanium to run scans and interpret tool reports.
Communicate vulnerability statuses to subscribers and Risk Management Framework (RMF) practitioners to support system accreditation processes.
Apply expertise in STIG fix text remediation to provide recommendations to customers.
Document recommendations in executive reports.
Support IV&V efforts using automated and manual testing, examination, scanning, interviewing, and discovery techniques to identify, validate, and assess security vulnerabilities and deficiencies in information systems, including enclaves, networks, applications, services, software, and Platform IT (PIT).