Cybersecurity Analyst
Job Description
Collaborate with DoD system stakeholders to identify cyber risks, support RMF/A&A deliverables, and guide remediation for cloud and hybrid environments.
Responsibilities
- Partner with contractor teams and DoD government system owners, system administrators, and developers to identify cyber risks, analyze applicable policies, and define mitigation strategies.
- Use input from subject matter experts (SMEs) and engineers to assess technical infrastructure and personnel dynamics across the threat landscape.
- Support clients with actionable remediation plans.
- Communicate risk management outcomes through presentations, detailed white papers, and milestone-based deliverables.
- Translate security concepts for client decision-making to strengthen protection of critical DoD systems.
- Serve as an information security SME while expanding capabilities across DevSecOps and cloud security.
Requirements
- 5+ years of experience working in a professional IT environment.
- 3+ years of experience in cybersecurity and Assessment and Authorization (A&A) supporting DoD environments.
- Experience supporting federal government or DoD ATO packages, including performing A&A and RMF, and conducting risk assessments for federal government or DoD systems hosted in AWS, Azure, or hybrid cloud.
- Experience performing technical evaluations and security control assessments in cloud-native and containerized environments.
- Experience interfacing with engineering teams to align DevSecOps pipelines with cybersecurity policies.
- Experience with NIST SP 800-53, CNSSI 1253, artifact generation, SSPs, POA&Ms, SAPs, risk assessments, and continuous monitoring.
- Knowledge of compliance testing tools such as ACAS, SCAP, STIGs or SRGs, eMASS, or Xacta.
- Top Secret clearance.
- HS diploma or GED.
- Ability to obtain DoD 8570 Level II Security+ Certification within 30 days of the start date.
Technologies
- AWS, Azure
- NIST SP 800-53
- CNSSI 1253
- ACAS, SCAP, STIGs, SRGs
- eMASS, Xacta
- DoD 8570 Level II Security+ Certification
- SSPs, POA&Ms, SAPs
- RMF, DevSecOps, A&A, continuous monitoring
Nice If You Have
- Experience with DevSecOps, Path-to-Production, and CI/CD.
- Experience administering Red Hat Enterprise Linux 8 or Windows Server 2019.
- Experience with cloud tools and container orchestration security.
- Knowledge of STIG and compliance scans.
- Ability to advise stakeholders on cloud security strategies and container orchestration security such as Kubernetes, Rancher, and platform hardening.
- Excellent verbal and written communication skills.
- TS/SCI clearance.
- Bachelor’s degree in IT or Cybersecurity.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards program.
- Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.
Compensation
- Salary range: $62,000 to $141,000 per year (annualized USD).
- Final compensation may vary based on location, education, knowledge, skills, competencies, experience, and contract-specific affordability and organizational requirements.
- Projected posting close: within 90 days from the Posting Date.
Work Model
- Onsite: work primarily performed at a Booz Allen office or customer facility, collaborating directly with colleagues and customers as required.
Clearance
- Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.
Additional Notes
- Identity verification may be required using advanced biometrics and artificial intelligence; candidates are expected to be on camera during interviews and assessments.
- Candidate AI usage policy: using AI or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.
- Non-discrimination: all qualified applicants receive consideration without regard to protected characteristics under applicable law.
Location: McLean, VA (onsite) • Experience: 3+ years (minimum) • Education: HS diploma or GED • Salary: USD 62,000 - 141,000 per yearly.