Systems Security Analyst

Booz Allen Hamilton•Alexandria, VA

4d•$53,000 - $108,000•Onsite

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action. As a Systems Security Analyst on our team, you’ll assist with discovering their cyber risks, understanding applicable policies, and developing a mitigation plan. You’ll gather technical and personnel details to help with the assessment of the entire threat landscape. You’ll learn how to guide your client through a plan of action with presentations, white papers, and milestones and help to translate security concepts so they can make the best decisions to secure their critical infrastructure. Work with us as we protect the Army enterprise network. Join us. The world can’t wait.

Requirements

1+ years of experience as an ISSO or Information System Security Analyst (ISSA)
1+ years of experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements
Experience with the implementation, oversight, and maintenance of security configuration, practices, and procedures for systems
Experience implementing controls from NIST 800-53
Experience with eMASS or Xacta IA Manager
Ability to perform risk analysis
TS/SCI clearance
HS diploma or GED
DoD 8570 IAT Level II Certification such as CCNA-Security, Security+ CE, CySA+, or SSCP Certification

Nice To Haves

Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool
Experience assessing configuration changes such as new COTS tools or web application upgrades to the system security boundary
Experience drafting tool implementation CONOPS and reviewing tool or capabilities topologies, CONOPS, and vulnerability scans to assess risk
Experience with cyber-related tools such as Ansible, Terraform, Splunk, or STIG Viewer
Ability to plan and conduct security authorization reviews and assurance case development for the initial installation of systems and networks
Ability to work within a collaborative team, and a fast-paced and dynamic environment
Possession of excellent written, organizational, presentation, and verbal communication skills
Cyber management certifications including CGRC, CISM, or CISSP

Responsibilities

Assist with discovering cyber risks.
Understand applicable policies.
Develop a mitigation plan.
Gather technical and personnel details to help with the assessment of the entire threat landscape.
Guide your client through a plan of action with presentations, white papers, and milestones.
Translate security concepts so they can make the best decisions to secure their critical infrastructure.