Systems Security Analyst

Booz Allen Hamilton•Alexandria, VA

4d•$62,000 - $141,000•Remote

About The Position

Cyber threats are evolving, and perimeter security and automated protection aren’t enough—it’s time to go threat hunting. We need your cyber knowledge to detect advanced cyber threats in the Army enterprise network. Instead of letting the attackers come to us, let’s go find them. We’re looking for a specialist who can think like a cyber attacker to figure out how to circumvent security measures. This is an opportunity to use your analytical skills and gain network defense experience. You’ll learn to rapidly prototype and develop scripts to create haystacks where you’ll sift through the false positives to find patterns and indicators. Learn from our team of cyber threat hunter experts as you find the adversary in the SEIM’s blind spot to help the Army close the gaps and harden their network. This is a chance to think differently about cyber defense, use completely new tools and approaches, and develop the next generation of security analytics. Join us. The world can’t wait.

Requirements

2+ years of experience as an ISSO or Information System Security Analyst (ISSA)
2+ years of experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements
Experience with the implementation, oversight, and maintenance of security configuration, practices, and procedures for systems
Experience implementing controls from NIST 800-53
Experience with eMASS or Xacta IA Manager
Ability to perform risk analysis
Top Secret clearance
HS diploma or GED
DoD 8570 IAT Level II Certification such as CCNA-Security, Security+ CE, CySA+, or SSCP Certification

Nice To Haves

Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool
Experience assessing configuration changes such as new COTS tools or web application upgrades to the system security boundary
Experience drafting tool implementation CONOPS and reviewing tool or capabilities topologies, CONOPS, and vulnerability scans to assess risk
Experience with cyber-related tools such as Ansible, Terraform, Splunk, or STIG Viewer
Ability to plan and conduct security authorization reviews and assurance case development for the initial installation of systems and networks
Ability to work within a collaborative team, and a fast-paced and dynamic environment
Possession of excellent written, organizational, presentation, and verbal communication skills
Cyber management certifications including CGRC, CISM, or CISSP

Responsibilities

Detect advanced cyber threats in the Army enterprise network.
Think like a cyber attacker to figure out how to circumvent security measures.
Use analytical skills and gain network defense experience.
Rapidly prototype and develop scripts to create haystacks where you’ll sift through the false positives to find patterns and indicators.
Find the adversary in the SEIM’s blind spot to help the Army close the gaps and harden their network.
Think differently about cyber defense, use completely new tools and approaches, and develop the next generation of security analytics.