RMF Cybersecurity Analyst

Booz Allen Hamilton•Lexington, MA

21h•$61,900 - $141,000•Onsite

About The Position

Warnings about cyber threats are everywhere and the constantly evolving nature of these threats can make understanding them seem overwhelming to the Department of Defense (DoD). In all of this “cyber noise”, how can these organizations understand their risks and how to mitigate them? The answer is you, build your knowledge as an information security risk specialist who knows how to break down complex threats into manageable plans of action. As an information security risk specialist on our team, you’ll work with DoD organizations to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from on-site members to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take an active role in information security while growing your skills in cloud technology, cybersecurity, and risk management. Join us as we protect our nation’s cyber infrastructure. Join us. The world can’t wait.

Requirements

Experience with cybersecurity policy and DoD Risk Management Framework (RMF)
Experience with the Enterprise Mission Assurance Support Service (eMASS) and Security Technical Implementation Guides (STIGs)
Experience with the Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP), hardening systems, or applying security control
Secret clearance
HS diploma or GED
Security+, Certified Information Security Manager (CISM), or Certified Information System Security Professional (CISSP) Certification

Nice To Haves

Experience as an operating systems administrator, systems engineer, requirements analyst, information systems security officer, information systems security manager, or information systems security engineer
Experience with the Ports, Protocols, and Services (PPS) Matrix, Vulnerability Remediation Asset Manager (VRAM), or Host Based Security System (HBSS)
Ability to analyze procedures, standard operating procedures, and RMF policies

Responsibilities

Work with DoD organizations to discover their cyber risks, understand policies, and develop a mitigation plan.
Get technical, environmental, and personnel details from on-site members to assess the entire threat landscape.
Guide your client through a plan of action with presentations, whitepapers, and milestones.
Translate security concepts for your client so they can make the best decisions to secure their mission-critical systems.