Systems Security Analyst

Booz Allen Hamilton•Alexandria, VA

2d•$86,800 - $198,000•Remote

About The Position

As a systems security analyst, you understand the value of hunt-forward operations, and you know that battles are won in the grey. At Booz Allen, you can use your cyberspace operations experience to create solutions that will be executed on a worldwide stage. We’re looking for an experienced systems security analyst like you to apply your knowledge in conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements to impact the Army's defense. In this role, you’ll be counted on to monitor system activity for security breaches and anomalies, analyze logs and alerts to identify potential threats and vulnerabilities, conduct regular security assessments and audits of systems and applications, and recommend and implement measures to mitigate identified risks. This is an opportunity to use your research and analysis abilities to adequately assess and inform operators and senior leadership or commanders on dynamic adversarial tactics, techniques, and procedures for the Army. Your role will be vital in the development of operations plans. If you want to be in the fight–working shoulder to shoulder with our mission partners–influencing the most critical global cyber missions, this is the opportunity for you. Join us. The world can’t wait.

Requirements

5+ years of experience as an ISSO or Information System Security Analyst (ISSA)
5+ years of experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements
Experience with the implementation, oversight, and maintenance of security configuration, practices, and procedures for systems
Experience implementing controls from NIST 800-53
Experience with eMASS or Xacta IA Manager
Ability to perform risk analysis
TS/SCI clearance
Bachelor's degree
DoD 8570 IAT Level II Certification such as CCNA-Security, Security+ CE, CySA+, or SSCP Certification

Nice To Haves

Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool
Experience assessing configuration changes such as new COTS tools or web application upgrades to the system security boundary
Experience drafting tool implementation CONOPS and reviewing tool or capabilities topologies, CONOPS, and vulnerability scans to assess risk
Experience with cyber-related tools such as Ansible, Terraform, Splunk, or STIG Viewer
Ability to plan and conduct security authorization reviews and assurance case development for the initial installation of systems and networks
Ability to work within a collaborative team, and a fast-paced and dynamic environment
Possession of excellent written, organizational, presentation, and verbal communication skills
Cyber management certifications including CGRC, CISM, or CISSP Certification

Responsibilities

Monitor system activity for security breaches and anomalies
Analyze logs and alerts to identify potential threats and vulnerabilities
Conduct regular security assessments and audits of systems and applications
Recommend and implement measures to mitigate identified risks
Assess and inform operators and senior leadership or commanders on dynamic adversarial tactics, techniques, and procedures for the Army
Develop operations plans