Systems Security Analyst

Booz Allen Hamilton•Alexandria, VA

2d•$86,800 - $198,000

About The Position

As a systems security analyst, you know the key to detecting and deterring malicious activity is quality risk-based intel that maps to a tactical behavior. At Booz Allen, you can apply your expertise to investigate the most pressing systems security impacting the Army. This is your chance to recommend ways to harden systems, reduce their attack surface, and thwart malicious actors. As a systems security analyst on our team, you’ll monitor system activity for security breaches and anomalies and analyze logs and alerts to identify potential threats and vulnerabilities. You’ll conduct strategic assessments on systems and networks and provide tactical analyses and influential recommendations for network operation. You’ll be the key to discovering and correlating timely threat intel and deciphering what represents a real risk. Cyber threats are evolving. Booz Allen is committed to creating an environment where you not only keep pace with the industry but propel it forward. With access to academic programs, certifications, and opportunities to use expert tradecraft, we’ll continuously invest in you so you can create the career you want Join us. The world can’t wait.

Requirements

3+ years of experience as an ISSO or Information System Security Analyst (ISSA)
3+ years of experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements
Experience with the implementation, oversight, and maintenance of security configuration, practices, and procedures for systems
Experience implementing controls from NIST 800-53
Experience with eMASS or Xacta IA Manager
Ability to perform risk analysis
TS/SCI clearance
HS diploma or GED
DoD 8570 IAT Level II Certification such as CCNA-Security, Security+ CE, CySA+, or SSCP Certification

Nice To Haves

Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool
Experience assessing configuration changes such as new COTS tools or web application upgrades to the system security boundary
Experience drafting tool implementation CONOPS and reviewing tool or capabilities topologies, CONOPS, and vulnerability scans to assess risk
Experience with cyber-related tools such as Ansible, Terraform, Splunk, or STIG Viewer
Ability to plan and conduct security authorization reviews and assurance case development for the initial installation of systems and networks
Ability to work within a collaborative team, and a fast-paced and dynamic environment
Possession of excellent written, organizational, presentation, and verbal communication skills
Cyber management certifications including CGRC, CISM, or CISSP Certification

Responsibilities

Monitor system activity for security breaches and anomalies
Analyze logs and alerts to identify potential threats and vulnerabilities
Conduct strategic assessments on systems and networks
Provide tactical analyses and influential recommendations for network operation
Discover and correlate timely threat intel and decipher what represents a real risk
Recommend ways to harden systems, reduce their attack surface, and thwart malicious actors