ISSO Security Analyst, Junior

Booz Allen Hamilton • McLean, VA

1d • $53,000 - $108,000 • Hybrid

About The Position

As a security analyst on the team, the employee works with government client Information System Owners (ISO), Information System Security Officers (ISSO), site managers, and other system stakeholders to coordinate and drive completion of Risk Management Framework (RMF) steps 0–6 and Authority to Operate (ATO) activities and requirements. The role identifies and mitigates risks, escalates project risks to leadership, applies authorization policies and processes, and provides information system security expertise.

The employee helps maintain the appropriate operational security posture of information systems throughout their lifecycle, from acquisition and installation through decommissioning. Duties include completing and maintaining detailed security documentation and coordinating ATO support for system installations, IT systems, networks, hardware, and software across varied installation sites. The analyst translates security concepts into actionable recommendations to support informed client decisions and ensure systems are fully commissioned through production deployment and decommissioning.

Requirements

• Knowledge of NIST SP 800-53 security controls, RMF, system authorizations, and security compliance standards and processes.
• Ability to support all RMF steps, including security categorizations, creating and updating security artifacts and FISMA security documents, documenting control implementation details, and maintaining POA&Ms.
• Ability to create plans and approaches for secure product installation in accordance with agency authorization policy requirements for major system changes and development lifecycles.
• Ability to identify potential risks and work with system stakeholders to create mitigation strategies.
• Ability to analyze authorization documents and associated artifacts against authorization requirements, identify gaps, establish schedules, and coordinate with stakeholders to meet deadlines.
• Ability to independently lead client-facing meetings and present complex ATO topics.
• Ability to organize, manage, and maintain large amounts of discrete data with various expiration dates across multiple systems simultaneously.
• Ability to obtain a Secret clearance.
• Bachelor’s degree.

Nice To Haves

• Experience with Continuous Authorization and Monitoring (CAM).
• Experience supporting ATOs for specialized devices.
• Ability to engage with varying levels of staff and leadership.
• Excellent verbal and written communication skills.

Responsibilities

• Coordinate and drive completion of RMF steps 0–6 ATO activities and requirements with government client system owners, ISSOs, site managers, and other stakeholders.
• Identify and mitigate risks, escalate project risks to leadership, and develop mitigation strategies with system stakeholders.
• Apply authorization policies and processes and provide information system security expertise.
• Maintain the operational security posture of information systems throughout their lifecycle, from acquisition and installation through decommissioning.
• Complete and maintain detailed security documentation and coordinate ATO support duties for system installations, IT systems, networks, hardware, and software.
• Translate security concepts into actionable recommendations to help clients make informed security decisions about IT deployments.
• Support full system commissioning through production deployment and decommissioning.
• Analyze authorization documents and artifacts, identify gaps, establish schedules for outstanding requirements, and coordinate with stakeholders to address gaps by required deadlines.
• Lead client-facing meetings and present complex ATO topics.
• Organize, manage, and maintain large amounts of data with varying expiration dates across multiple systems.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level