Security and Compliance Analyst

Booz Allen Hamilton•Doral, FL

1d•$99,000 - $225,000•Remote

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—an information security risk specialist who will break down complex threats into manageable plans of action. As an information security risk specialist on our team, you’ll use your experience to work with military organizations to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll review technical and personnel details to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts, so they can make the best decisions to secure their mission-critical systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in technology and security. Join us. The world can’t wait.

Requirements

Experience conducting security assessments, preparing compliance documentation, and ensuring regulatory adherence in cloud and hybrid environments
Experience with vulnerability remediation
Experience using compliance tools such as Microsoft Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security
Knowledge of NIST, RMF, and Zero Trust security principles
TS/SCI clearance
Bachelor’s degree in Cybersecurity, Information Assurance, or Computer Science and 2+ years of experience in security and compliance roles, or 5+ years of experience in security and compliance roles in lieu of a degree

Nice To Haves

Experience working in DoW or IC environments
Experience with RMF or ATO processes
Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or CompTIA Security+ Certification

Responsibilities

Conduct security assessments
Prepare compliance documentation
Ensure regulatory adherence in cloud and hybrid environments
Remediate vulnerabilities
Translate security concepts for clients to make informed decisions about securing mission-critical systems
Act as an information security subject matter expert
Broaden skills in technology and security