ISSO Security Analyst, Junior

Booz Allen Hamilton•McLean, VA

21h

About The Position

As a security analyst, you will work with a government client’s Information System Owners (ISO), Information System Security Officers (ISSO), site managers, and other system stakeholders to coordinate and drive completion of Risk Management Framework (RMF) steps 0–6 and Authority to Operate (ATO) activities. You will identify and mitigate risks, escalate project risks to leadership, apply authorization policies and processes, and provide information system security expertise. You will help maintain the operational security posture of information systems throughout their lifecycle, from acquisition and installation through decommissioning. The role includes preparing and maintaining detailed security documentation and coordinating ATO support for system installations involving IT systems, networks, hardware, and software at varied site types. You will translate security concepts into actionable recommendations to help the client make informed decisions about IT deployments, supporting commissioning through production deployment and decommissioning. You will serve as an information security and RMF subject matter expert while developing cybersecurity skills.

Requirements

Knowledge of NIST SP 800-53 security controls, RMF, system authorizations, and security compliance standards and processes.
Ability to support all RMF steps, including security categorizations, creating and updating security artifacts and FISMA security documents, documenting control implementation details, and managing POA&Ms.
Ability to plan secure product installations in accordance with agency authorization policies and identify and mitigate risks.
Ability to analyze authorization documents and artifacts, identify gaps, schedule remediation, and coordinate with stakeholders to meet deadlines.
Ability to independently lead client-facing meetings and present complex ATO topics.
Ability to organize, manage, and maintain large amounts of discrete data with varying expiration dates across multiple systems.
Ability to obtain a Secret clearance.
Bachelor’s degree.

Nice To Haves

Experience with Continuous Authorization and Monitoring (CAM).
Experience supporting ATOs for specialized devices.
Ability to engage with varying levels of staff and leadership.
Excellent verbal and written communication skills.

Responsibilities

Coordinate and drive completion of RMF steps 0–6 ATO activities and requirements with system owners, ISSOs, site managers, and other stakeholders.
Identify and mitigate risks, escalate project risks to leadership, and develop mitigation strategies with system stakeholders.
Apply authorization policies and processes and provide information system security expertise.
Maintain the operational security posture of information systems throughout their lifecycle, from acquisition and installation through decommissioning.
Complete and maintain detailed security documentation and coordinate ATO support duties for system installations, IT systems, networks, hardware, and software.
Translate security concepts into actionable implementation recommendations to support informed client decisions about IT deployments.
Support full commissioning of IT deployments through production deployment and decommissioning.
Create plans and approaches for secure product installation in accordance with agency authorization policies for major system changes and development lifecycles.
Analyze authorization documents and artifacts against requirements, identify gaps, establish schedules to address outstanding requirements, and coordinate with stakeholders to meet deadlines.
Lead client-facing meetings and present complex ATO topics.
Organize, manage, and maintain large amounts of discrete data with varying expiration dates across multiple systems.