ISSO Security Analyst, Junior

Booz Allen Hamilton • McLean, VA

2d • $53,000 - $108,000

About The Position

As a junior security analyst, you will work with government-client Information System Owners (ISOs), Information System Security Officers (ISSOs), site managers, and other system stakeholders to coordinate and drive completion of Risk Management Framework (RMF) steps 0–6 and Authorization to Operate (ATO) activities. You will identify and mitigate risks, escalate project risks to leadership, apply authorization policies and processes, and provide information system security expertise. You will help maintain the operational security posture of information systems throughout their lifecycle, from acquisition and installation through decommissioning.

The role includes completing and maintaining detailed security documentation and coordinating ATO support for system installations involving IT systems, networks, hardware, and software at varied installation sites. You will translate security concepts into actionable recommendations, helping the client make informed decisions about IT deployments and ensure systems are commissioned, deployed into production, and decommissioned appropriately. The position offers an opportunity to serve as an information security and RMF subject matter expert while developing cybersecurity skills.

Requirements

• Knowledge of NIST SP 800-53 security controls, RMF, system authorizations, and security compliance standards and processes.
• Ability to support all RMF steps, including security categorizations, creating and updating security artifacts and FISMA security documents, documenting control implementation details, and maintaining POA&Ms.
• Ability to plan secure product installations in accordance with agency authorization policies and identify risks and develop mitigation strategies with system stakeholders.
• Ability to analyze authorization documents and artifacts, identify gaps, establish schedules, and coordinate with stakeholders to address requirements by deadlines.
• Ability to independently lead client-facing meetings and present complex ATO topics.
• Ability to organize and maintain large amounts of discrete data across multiple systems.
• Ability to obtain a Secret clearance.
• Bachelor’s degree.

Nice To Haves

• Experience with Continuous Authorization and Monitoring (CAM).
• Experience supporting ATOs for specialized devices.
• Ability to engage with staff and leadership at varying levels.
• Excellent verbal and written communication skills.

Responsibilities

• Coordinate and drive completion of RMF steps 0–6 and ATO activities and requirements with government-client system owners, security officers, site managers, and other stakeholders.
• Identify and mitigate risks, escalate project risks to leadership, and apply authorization policies and processes.
• Help maintain the appropriate operational security posture of information systems throughout their lifecycle, from acquisition and installation through decommissioning.
• Complete and maintain detailed security documentation.
• Coordinate ATO support duties documenting security details related to system installations, IT systems, networks, hardware, and software.
• Translate security concepts into actionable recommendations to inform client decisions about IT deployments.
• Support full commissioning through production deployment and decommissioning.
• Create secure installation plans and approaches aligned with agency authorization policies for major system changes and development lifecycles.
• Analyze authorization documents and artifacts for gaps, establish schedules to address outstanding requirements, and coordinate with stakeholders to meet deadlines.
• Lead client-facing meetings and present complex ATO topics.
• Organize, manage, and maintain large amounts of discrete data with varying expiration dates across multiple systems.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards program for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level