Security Control Assessor

Booz Allen Hamilton•Hampton, VA

About The Position

Security Control Assessor The Opportunity: As a cyber mission specialist, you understand the value of hunt-forward operations, and you know that battles are won in the grey. At Booz Allen, you can use your cyberspace operations experience to create solutions that will be executed on a worldwide stage. We’re looking for a cyber mission specialist like you to apply your experience with identifying gaps in the application of key security controls and assessing the risk to our nation’s space assets. In this role, you’ll be counted on to help understand cyberspace capabilities to evaluate potential weaknesses as well as the effectiveness of mitigations for cybersecurity solutions. You will work with your team to review administrative and technical cybersecurity controls, then map potential vulnerabilities to real world threats to inform senior leadership of risk at mission and agency level. This is an opportunity to use your research and analysis abilities to adequately assess and inform stakeholders and senior leadership on dynamic adversarial tactics, techniques, and procedures for our client. Your role will be vital in the development of operations plans to support our return to the moon and explore the unknown. If you want to be in the fight–working shoulder to shoulder with our space mission clients–influencing the most critical global cyber missions, this is the opportunity for you. Join us. The world can’t wait.

Requirements

2+ years of experience in Security Control Assessments
Knowledge of NIST 800-53 or 800-30 standards
Ability to handle a high volume of assessments, including program-scale operations
Ability to convey complex security concepts to various stakeholders
Ability to travel up to 20% of the time
Ability to obtain a Secret clearance
Bachelor’s degree

Nice To Haves

Experience with cloud platforms, preferably Google Cloud Platform (GCP)
Experience with Linux systems
Experience assessing non-traditional IT systems, including in a program-scale context
Ability to apply security measures across a range of IT systems
Ability to manage a rotating schedule of assessments
Possession of excellent organizational skills
Possession of excellent communication skills

Responsibilities

review administrative and technical cybersecurity controls
map potential vulnerabilities to real world threats to inform senior leadership of risk at mission and agency level
adequately assess and inform stakeholders and senior leadership on dynamic adversarial tactics, techniques, and procedures for our client
development of operations plans to support our return to the moon and explore the unknown