Independent Verification and Validation Analyst

Booz Allen Hamilton•Arlington, VA

22d•$62,000 - $141,000

About The Position

Independent Verification and Validation Analyst The Opportunity: Are you ready to take a strategic role in cyber analysis at the Department of Defense? Do you want to use your experience-based knowledge to protect cyber assets? If you want a position that uses your extensive threat analysis skills to identify vulnerabilities, you want to be an Independent Verification and Validation (IV&V) Analyst. As an Independent Verification and Validation (IV&V) Analyst, you will demonstrate the ability to correlate cyber vulnerabilities to customers’ cyber terrain using scanning technologies. You will apply technical knowledge of ACAS, HBSS, and Tanium to run scans, interpret tool reports, and communicate vulnerability statuses to subscribers and Risk Management Framework (RMF) practitioners to support system accreditation processes. You will apply expertise in STIG fix text remediation to provide recommendations to customers and document those recommendations in executive reports. You’ll support IV&V efforts using automated and manual testing, examination, scanning, interviewing, and discovery techniques to identify, validate, and assess security vulnerabilities and deficiencies in information systems, including enclaves, networks, applications, services, software, and Platform IT (PIT). Join us. The world can't wait.

Requirements

5+ years of experience with cybersecurity
Experience with Risk Management Framework
Experience running scans using ACAS, HBSS, or Tanium
Top Secret clearance
Bachelor’s degree
Ability to obtain a DoD 8570 IAT Level III or IAM Level II Certification within 90 days of start date

Nice To Haves

Experience with systems development, testing, creating, or reviewing technical documentation, CONOPS, TTPs, and developmental and operational Instructions
Experience with eMASS
Experience with Agile development methodologies
Ability to manage and prioritize multiple tasks simultaneously
TS/SCI clearance

Responsibilities

correlate cyber vulnerabilities to customers’ cyber terrain using scanning technologies
apply technical knowledge of ACAS, HBSS, and Tanium to run scans, interpret tool reports, and communicate vulnerability statuses to subscribers and Risk Management Framework (RMF) practitioners to support system accreditation processes
apply expertise in STIG fix text remediation to provide recommendations to customers and document those recommendations in executive reports
support IV&V efforts using automated and manual testing, examination, scanning, interviewing, and discovery techniques to identify, validate, and assess security vulnerabilities and deficiencies in information systems, including enclaves, networks, applications, services, software, and Platform IT (PIT)