Security Assessment And Authorization

Security Assessment And Authorization Cybersecurity Jobs

7 jobs found

Today

Principal Cybersecurity Analyst

Northrop Grumman Chantilly, VA

Chantilly, VA

Today

$177k - $266k/yr Full time Cloud Platforms Information Security Information Technology (IT)

Apply Now

Job Description

Benefits-forward role supporting mission-critical network infrastructure in Chantilly, VA (onsite) with compensation ranging from $177,000 to $265,600 per year. This Principal / Sr. Principal Cybersecurity Analyst position supports certification and accreditation efforts, security assessments, and Security Test and Evaluation (ST&E) activities for customer product suites.

Responsibilities

Support mission critical network infrastructure by collecting data for analysis and helping ensure maintenance and renewal of Assessment and Authorization accreditation for a suite of customer products.
Perform assessments across systems and networks within a networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy using both passive evaluations (for example, compliance audits) and active evaluations (including vulnerability assessments).
Establish program control processes to support mitigation of risks and enable certification and accreditation of systems.
Contribute to process support and analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research inspections, and periodic audits.
Assist with implementation of required government policy (NISPOM and DCID 6-3), provide recommendations on process tailoring, and participate in and document process activities.
Conduct analyses to validate established security requirements and recommend additional security requirements and safeguards.
Support required Security Test and Evaluation (ST&E) activities by preparing for tests, participating, analyzing results, and preparing required reports.
Document Certification and Accreditation results and technical or coordination activity, and prepare system Security Plans and update the Plan of Actions and Milestones (POA&M).
Periodically conduct complete reviews of system audits and monitor corrective actions until all actions are closed.

Required Qualifications

Active TS/SCI with Polygraph required to be considered and required to start.
Experience implementing the Risk Management Framework (RMF) process and supporting/documenting Certification and Accreditation artifacts.
Experience supporting the A&A process for system accreditation.
Experience reviewing technical security assessments of computing environments that identify points of vulnerability or non-compliance.
Familiarity with RMF and the process of accrediting a system through it, including nuances in applying RMF.
Familiarity with NIST SP 800-53 rev.4, CNSS-1253, NSM-8, and high-level concepts of Zero Trust Architecture/Networking (ZTA/N) and possible implementations.
Experience with both initial accreditation activities and continuous monitoring tasks, with willingness to adapt to rapidly changing toolsets and control requirements.
Bachelor’s degree; 5 years of relevant experience (Principal) per the role level requirements.

Preferred Qualifications

CISSP, CASP, or other information technology security related certifications.
Experience using Rapid7 or Nessus.
Background in Technical Writing or Instructional Systems Design.
Privileged or power-user level knowledge in Microsoft Windows and/or Enterprise Linux variants.
Background in cloud computing infrastructure such as AWS or Microsoft Azure.

Technology Exposure

Risk Management Framework (RMF), NIST SP 800-53 rev.4, CNSS-1253, NSM-8, Zero Trust Architecture/Networking (ZTA/N)
Nessus, Rapid7, Splunk, Xacta
Microsoft Office suite (Excel, PowerPoint, Word), Microsoft Windows, Enterprise Linux variants
AWS, Microsoft Azure

Benefits

Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
Depending on the position: eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
Annual bonuses designed to reward individual contributions and share in company results
Potential eligibility for Long Term Incentives for employees in Vice President or Director positions

Additional Details

Location: Chantilly, VA (onsite)
Travel: Yes, 10% of the time
Relocation assistance: No relocation assistance available
Application period: Estimated 20 days from the job posting date; timeline may be shortened or extended based on business needs and candidate availability

View full job page →

13d ago

Senior Cybersecurity Analyst (RMF/FISMA)

KeyLogic Systems Washington, DC

Washington, DC

13d ago

$180k - $180k/yr Full time Senior Fisma Information Security

Apply Now

Job Description

KeyLogic Systems is hiring a Senior Cybersecurity Analyst to support RMF and FISMA cybersecurity governance, assessment, and compliance activities across Department of the Air Force enterprise environments. The role focuses on authorization readiness, risk analysis, and executive cyber risk reporting for mission stakeholders.

Location and Compensation

Location: Washington, DC (onsite)
Salary: USD 180,000 per year

Key Responsibilities

Lead or oversee RMF package readiness, authorization evidence, and ATO/ATC actions, including AO/SCA coordination and continuous-monitoring activities.
Review SSPs, SARs, POA&Ms, vulnerability and configuration evidence, inherited controls, and authorization dependencies for completeness and technical credibility.
Conduct cybersecurity assessments and control evaluations to validate security posture against required controls.
Support RMF authorization and continuous monitoring efforts as part of ongoing compliance operations.
Analyze compliance aligned to DoW, NIST, and federal cybersecurity standards.
Develop risk analyses, findings, and recommendations to support mitigation planning and decision-making.
Support cybersecurity governance forums and working groups through documentation, analysis, and tracking of outcomes.
Prepare executive briefings, reports, and metrics that communicate control status and cyber risk.
Evaluate emerging cybersecurity requirements and assess impacts to enterprise programs.

Deliverables

Cybersecurity compliance assessments and recommendations
RMF and FISMA support products
Risk analyses and mitigation strategies
Cybersecurity governance and reporting packages
ATO/ATC and authorization-readiness analyses
High/Very High Risk executive risk summaries
ISCM/FISMA reporting and cyber-risk metrics
POA&M and remediation analyses
Decision-support products for leadership actions

Required Qualifications

Clearance: Active Top Secret Clearance or higher
Experience: 18+ years of progressive experience
Governance: Extensive experience supporting cybersecurity governance initiatives
Compliance: Experience with RMF and FISMA compliance programs
Communication: Strong executive communication skills
IAM: IAM Level III

Education

Master's degree in a relevant field or equivalent experience

Preferred Qualifications

CISSP, CISM, or equivalent certification
Experience supporting Air or Space Force cybersecurity programs
Familiarity with Zero Trust initiatives
CSSP Analyst
Experience assessing cybersecurity implications, governance requirements, and risk management considerations for AI-enabled systems

Relevant Technologies and Standards

RMF
FISMA
ISCM
IAM Level III
DoW
NIST

Job Code

2794

View full job page →

24d ago

Cybersecurity / Information Assurance Specialist

CSA Global LLC Pensacola, FL

Pensacola, FL

24d ago

Full time Ato Cybersecurity Operations Cybersecurity Tools

Apply Now

Job Description

CSA Global LLC supports the Department of the Navy Common Access Card Program Management Office (CAC-PMO) by helping teams strengthen authorization-ready security across Navy information systems and network environments. In this onsite Pensacola, FL role, you will help deliver RMF and system authorization support, drive cybersecurity control assessment and remediation activities, and maintain continuing compliance through established Navy processes.

Responsibilities

Provide RMF and Certification & Accreditation / Assessment & Authorization support in accordance with Department of the Navy cybersecurity requirements.
Evaluate system information assurance and cybersecurity controls for compliance, identifying vulnerabilities, risks, and required remediation actions.
Develop, collect, assemble, analyze, and maintain RMF documentation and other cybersecurity artifacts supporting system authorization activities.
Enter and maintain authorization documentation and supporting evidence in eMASS.
Coordinate with system owners, validators, certification authorities, approving authorities, and other stakeholders to obtain and maintain system ATOs.
Apply and validate DISA STIGs and Group Policy Objects (GPOs) to help secure operating systems and applications.
Perform vulnerability assessments and develop security assessment reports using ACAS.
Configure and maintain ACAS capabilities, including required upgrades and patches supporting vulnerability-scanning activities.
Maintain cybersecurity and RMF documentation supporting Navy systems and applications, including DEERS/RAPIDS, PAS, and associated CAC-PMO capabilities.
Collaborate with Government program personnel, technical teams, system owners, and external stakeholders to support cybersecurity lifecycle management, risk management, system authorization, and continuing compliance activities.

Requirements

Ability to obtain and maintain an active Secret Clearance.
IA Contractor Training and Certification and Computing Environment (CE) certification such as Security+.
Bachelor’s degree in Computer Science or Management Information Systems.
Information Assurance, Cybersecurity, Electronic Documentation.
Experience in one or more of the following; DEERS Application/Function, Personnel, Education, and Training system knowledge may be required at the task order level.
Experience supporting DoD and/or Department of the Navy Risk Management Framework (RMF) activities.
Experience developing, reviewing, and maintaining RMF packages, security controls, cybersecurity artifacts, and system authorization documentation.
Working knowledge of the ATO / Assessment & Authorization lifecycle and cybersecurity risk-management processes.
Experience using eMASS to maintain RMF and system authorization documentation.
Working knowledge of DISA STIGs and security-hardening requirements for operating systems and applications.
Experience performing vulnerability assessment and compliance activities using ACAS.
Ability to analyze cybersecurity vulnerabilities and develop appropriate risk mitigation and remediation strategies.
Ability to coordinate effectively with system owners, cybersecurity personnel, validators, technical teams, and Government stakeholders.

Technologies

Risk Management Framework (RMF)
eMASS
DISA Security Technical Implementation Guides (STIGs)
Group Policy Objects (GPOs)
Assured Compliance Assessment Solution (ACAS)
DEERS/RAPIDS
PAS
Common Access Card Program Management Office (CAC-PMO)

Physical Requirements

Sit for extended periods of time and work at a computer workstation
Use hands and fingers to operate keyboards, mice, and other input devices
Communicate effectively, both verbally and in writing
Specific vision abilities required may include close vision, distance vision, depth perception, and the ability to adjust
Stand, walk, bend, or reach; Access equipment located in data centers, offices, or under desks
Lift and/or move equipment weighing up to 25 pounds
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions, in accordance with the Americans with Disabilities Act (ADA)

View full job page →

1mo ago

ISSO Analyst

EY San Antonio, TX

San Antonio, TX

1mo ago Closed

$73k - $109k/yr Full time Emass Fips / Nist Fisma

This position is no longer accepting applications (closed Nov 3, 2026).

Job Description

The ISSO Analyst role at EY supports Information System Security Officer (ISSO) and Security Control Assessment (SCA) activities across the NIST Risk Management Framework (RMF) lifecycle for federal information systems. The position centers on maintaining authorization documentation, building evidence packages mapped to NIST controls, supporting assessment readiness, and managing POA&M remediation and continuous monitoring tasks.

Location and Work Setup

Location: San Antonio, TX
Work model: Hybrid

Compensation

Estimated salary: USD 73,100 - 109,200 per year

Key Responsibilities

Support RMF delivery for assigned federal information systems by maintaining documentation and tracking actions, assisting system owners and government security personnel with authorization activities.
Support RMF Prepare by maintaining system information, stakeholder lists, asset and component inventories, authorization boundary information, data-flow documentation, interconnections, and risk context.
Assist with information-type identification, NIST SP 800-60 mapping, and FIPS 199 security categorization, and document rationale and supporting information for review.
Support control baseline selection and tailoring by documenting overlays, scoping decisions, organization-defined parameters, common controls, and system-specific responsibilities.
Draft and update authorization artifacts, including System Security Plans, control implementation statements, inventories, diagrams, assessment-readiness materials, and supporting appendices.
Collect, organize, and map evidence (policies, procedures, configurations, screenshots, tickets, scan outputs, and other materials) to applicable NIST SP 800-53 controls and assessment objectives.
Review implementation statements and evidence for completeness, consistency, and traceability, and escalate gaps or conflicting information to senior team members.
Prepare evidence packages, interview materials, document-request trackers, and response logs to support security control assessments.
Participate in evidence-gathering sessions and control interviews with system owners, engineers, application teams, and assessors, capturing decisions, action items, and follow-up requests.
Assist with drafting assessment responses, findings, risk statements, and corrective actions while preserving assessment independence.
Create and maintain POA&M records, including weaknesses, responsible parties, milestones, scheduled completion dates, remediation evidence, and closure documentation.
Track POA&M progress, follow up on overdue actions, validate evidence submissions, and escalate schedule or risk issues.
Execute continuous monitoring, including scheduled control reviews, vulnerability and configuration reporting, evidence refreshes, and recurring status deliverables.
Support security impact analyses for proposed system changes by documenting affected components, controls, evidence, and authorization artifacts.
Review vulnerability scan results, STIG or CIS benchmark results, and configuration data; connect technical findings to NIST controls and remediation activities.
Maintain accurate system records, workflows, and authorization artifacts in federal governance, risk, and compliance tools such as eMASS, JCAM, CSAM, or Xacta.
Perform first-level quality checks using established templates and checklists to identify missing information, inconsistent dates, unsupported conclusions, and formatting issues.
Track assigned deliverables and commitments, communicate progress clearly, and raise blockers or emerging risks promptly.
Collaborate with engagement team members and client stakeholders, incorporate feedback, and complete assigned work within expected timeframes.
Stay current on federal cybersecurity requirements and continue developing technical, writing, and RMF delivery skills.

Required Qualifications

Education: Bachelor's degree in cybersecurity, information technology, information systems, computer science, engineering, business, or a related field.
Experience: 1-3+ years of experience in cybersecurity, technology risk, compliance, or information technology, including hands-on experience supporting federal RMF activities.
Ability to obtain and maintain a secret level clearance.
Comfort working in a hybrid environment.
Experience developing or maintaining RMF documentation, collecting and organizing control evidence, supporting assessment readiness, tracking POA&Ms, or executing continuous monitoring activities.
Experience developing or maintaining at least one of the following:
- Federal authorization package development and maintenance
- NIST SP 800-53 control implementation statements and evidence mapping
- Security control assessment preparation and response coordination
- POA&M tracking, remediation support, or continuous monitoring reporting
- Federal governance, risk and compliance tools such as eMASS, JCAM, CSAM, or Xacta
- Technical security artifacts such as network diagrams, inventories, vulnerability scans, STIG or CIS benchmark results, change records, or configuration data
Flexibility to travel up to 20%.

Technologies

NIST CSF
NIST 800-53r5
NIST 800-37r2
NIST SP 800-60
FIPS 199
NIST SP 800-53
NIST SP 800-37
NIST 800-53A
FIPS 200
FISMA
eMASS
JCAM
CSAM
Xacta
POA&M
STIG
CIS benchmarks
FIPS 199 security categorization

Benefits

Comprehensive compensation and benefits package
Base salary range (varies by location)
Medical and dental coverage
Pension and 401(k) plans
Paid time off options
Flexible vacation policy
Time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence

Preferred Qualifications

CompTIA Security+, ISC2 CGRC, or another relevant cybersecurity or risk management certification
Prior experience supporting a federal agency, consulting engagement, service delivery center, or managed service

What the Role Emphasizes

Taking ownership of assigned work
Attention to detail in federal RMF delivery
Clear communication and collaboration
Constructive responsiveness to feedback and thoughtful questioning

View full job page →

1mo ago

Principal Classified Cybersecurity Analyst

Northrop Grumman Colorado Springs, CO

Colorado Springs, CO

1mo ago Closed

$104k - $155k/yr Full time Cybersecurity Analysis Information Security InfoSec

This position is no longer accepting applications (closed Nov 1, 2026).

Job Description

Northrop Grumman is seeking a Principal Classified Cybersecurity Analyst (ISSO) to support information systems lifecycle activities in a classified environment. The position requires on-site work in Colorado Springs, CO and frequent travel to the East Coast (up to 25%).

Location and Work Schedule

Location: Colorado Springs, CO (onsite)
Schedule: 9/80 work schedule
Travel: Yes, up to 25% of the time
On-site requirement: Full-time on-site at the Colorado Springs, CO location
Telecommute: Not available due to the classified nature of the work

Salary

Primary level salary range: USD 103,600 to 155,400 per year.

Role Responsibilities

Conduct system audits and continuous monitoring activities across security controls, configurations, and operational processes to evaluate the security posture of information systems.
Perform assessments of systems and networks within a networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
Analyze and validate established security requirements, and recommend additional security requirements and safeguards.
Assist with implementation of required government policy, including recommendations for process tailoring and participation in and documentation of process activities.
Establish strict program control processes to support mitigation of risks and the Assessment and Authorization (A&A) of systems, including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Support the Security Test and Evaluation (ST&E) required by each government accrediting authority, including pre-test preparations, test participation, result analysis, and preparation of required reports.
Document the results of A&A activities and related technical or coordination activities, and prepare the Risk Management Framework (RMF) body of evidence.

Minimum Qualifications

Education and experience requirement: Master’s degree with 3 years of relevant technical experience; or Bachelor’s degree with 5 years; or Associate degree with 7 years; or High School Diploma/GED with 9 years.
U.S. Government 8140 requirements: Must meet the 8570 equivalent for Principal Classified Cybersecurity Analyst – IAM level II certification or higher (examples: CAP or CGRC, CASP+ or CompTIA Security X, GSLC, CISSP-Associate, CISM, CISSP, GSLC, CCISO).
Security clearance: Must have a current U.S. Government Secret level security clearance (minimum) to be considered.

Preferred Qualifications

Bachelor’s degree in Cybersecurity or related field.
U.S. Government 8140 IAM III certification (e.g., CISM, CISSP (or Associate), GSLC, etc.).
Experience in cybersecurity compliance with DCSA, including Assessment & Authorization under RMF.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation including NIST, NISPOM, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.
Top Secret, SAP/SAR access, SCI access, and/or Polygraph preferred.

Security Clearance for Start

Required: Yes
Type: Secret

Benefits

401k matching program
Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business

Travel Requirements

Business travel is required, with an estimated frequency of up to 25% to the East Coast.

View full job page →

1mo ago

Senior Manager, Cybersecurity

SHIELD AI Washington, DC

Washington, DC

1mo ago Closed

$170k - $250k/yr Full time Manager Senior Continuous Authorization

This position is no longer accepting applications (closed Oct 30, 2026).

Job Description

Own end-to-end cybersecurity strategy and authorization execution for complex, mission-critical classified systems at Shield AI in Washington, DC.

Responsibilities

Provide overall accountability for RMF execution across Shield AI classified systems using JSIG, DAAPM, and NIST SP 800-53, with continuous authorization as the target end state.
Maintain a single authoritative view of authorization posture, including ATO and IATT status, expiration dates, conditions, open POA&M items, and assessment findings across systems and sites.
Own the accreditation roadmap and commit dates in partnership with program management; manage dependencies that affect whether dates hold (facility, network, tooling, personnel).
Serve as Shield AI’s senior security authority with Authorizing Officials, SCAs, government program security officers, and DCSA or cognizant SAPCO representatives.
Define reciprocity and inheritance strategy so implemented controls are reused across programs and sites instead of re-litigated in each package.
Approve risk acceptance recommendations, deviations, and mitigation strategies prior to government submission; escalate residual risk to Shield AI leadership with a clear position.
Define the enterprise continuous monitoring approach, including vulnerability scanning, STIG and SRG compliance, audit review, and configuration drift detection, and enforce reporting cadence.
Standardize package templates, control evidence libraries, hardening baselines, and inheritance documentation so new enclaves begin from an accredited pattern.
Drive automation using infrastructure as code, scripted STIG application, and scan and evidence pipelines to make compliance repeatable.
Select and own the security compliance toolchain, including eMASS or Xacta, ACAS/Nessus, SCAP, and SIEM, including budget, licensing, and government-directed tooling requirements.
Define metrics that reflect real security posture and report them to Federal Systems and company leadership.
Partner with IT, network, platform, and product security engineering so security architecture is built in rather than retrofitted for assessment readiness.
Coordinate with Industrial Security, Facilities, and Contracts for new facility and enclave stand-ups from concept through ATO, including accredited network extensions between facilities.
Advise program managers and engineering leadership on accreditation timelines and the security impact of architecture, schedule, and staffing decisions.
Lead classified incident response, including containment, spillage and contamination response, government reporting, and after-action corrective plans.
Ensure classified user population readiness: training, least-privilege and auditable access, and data transfer and media control actions aligned with program guidance.

Requirements

Bachelor’s degree in Cybersecurity, Electrical Engineering, Computer Engineering, Systems Engineering, Computer Science, or related technical field.
8+ years of experience in cybersecurity engineering, defense systems, mission systems, or military aerospace programs.
Experience leading cybersecurity activities for complex integrated systems or defense platforms.
Strong knowledge of RMF, STIGs, system hardening, network security, secure architectures, and vulnerability management processes.
Experience across hardware, software, networking, and mission system integration environments.
Active Top Secret Clearance with SCI Eligibility.

Technologies

JSIG, DAAPM, NIST SP 800-53
RMF, STIGs, SRG
eMASS, Xacta, ACAS/Nessus, SCAP, SIEM
Infrastructure as code

What You’ll Do

Lead the security strategy behind advanced, mission-critical technology.
Drive secure and scalable solutions across technical and business teams to protect complex systems, support compliance, and prepare for real-world operations.

Preferred Qualifications

Experience supporting military aircraft, UAV, mission systems, or tactical communication platforms.
Familiarity with resilient system architectures, zero trust principles, cross-domain solutions, and contested environment operations.
Experience with MBSE methodologies and tools such as Cameo Systems Modeler.
Background supporting cybersecurity test events, airworthiness, or platform accreditation activities.

Pay and Benefits Information

$170,000 - $250,000 per year.
Pay within range listed plus bonus, benefits, and equity.
Pay within range listed above plus a temporary benefits package (applicable after 60 days of employment).
Salary compensation is influenced by skill set, level of experience, licenses and certifications, and specific work location.
Offers are contingent on a cleared background and a possible reference check.

View full job page →

1mo ago

Information Systems Security Engineer

Booz Allen Hamilton Reston, VA

Reston, VA

1mo ago Closed

$99k - $225k/yr Full time Cloud Security Assurance Cyber Security Engineer

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

In this role, you will help secure cloud-hosted information systems across the full lifecycle by engineering, implementing, and assessing security controls. You will work with stakeholders across cloud, cybersecurity, risk management, and assessment and authorization to convert security requirements into practical designs that support authorization decisions.

Key Responsibilities

Engineer, implement, and assess security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and assessment and authorization requirements.
Translate security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Develop and maintain A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Assess control implementation and effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
Apply Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
Perform security engineering across requirements analysis, architecture reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Support security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring activities.
Communicate security risks, decisions, compliance status, remediation plans, and technical recommendations to program stakeholders.

Required Qualifications

8+ years of experience in information systems security engineering, cloud security, or cybersecurity.
Experience engineering, implementing, and assessing security controls for cloud-hosted information systems aligned to RMF, ICD 503, NIST guidance, and assessment and authorization processes.
Experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities.
Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, security assessment plans, POA&Ms, continuous-monitoring plans, and evidence packages.
Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
Experience performing security engineering across the system lifecycle.
Ability to assess control effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
TS/SCI clearance; willingness to take a polygraph exam.
Bachelor’s degree.

Technologies

RMF
ICD 503
NIST
Zero Trust
Least privilege
Defense in depth
Segmentation
Encryption
Auditability
Terraform
OCI Resource Manager
Ansible
SIEM
SOAR

Nice to Have

Experience supporting classified, Government, or highly regulated information systems.
Experience with vulnerability management, configuration compliance, SIEM, SOAR, endpoint security, or cloud security posture management tools.
Experience with infrastructure as code and automated security configuration using Terraform, OCI Resource Manager, Ansible, APIs, or scripting.
Experience supporting authorization packages, control validation, audit readiness, remediation tracking, or continuous monitoring in an agency environment.
Possession of strong written and verbal communication skills.
Associate or Professional level security, architecture, networking, or cloud operations certification.

Work Model and Location

Reston, VA (onsite). Work will primarily be performed full-time at a customer facility, with collaboration as required by the role.

Clearance

Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required.

Compensation

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Benefits

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program acknowledging employees for exceptional performance and superior demonstration of company values
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen benefit programs
Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits

Identity Verification and Interview Policy

You will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
You are expected to be on camera during interviews and assessments.
The company reserves the right to take your picture to verify your identity and prevent fraud.
The use of artificial intelligence (AI) or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

View full job page →

Security Assessment And Authorization Cybersecurity Jobs

Principal Cybersecurity Analyst

Senior Cybersecurity Analyst (RMF/FISMA)

Cybersecurity / Information Assurance Specialist

ISSO Analyst

Principal Classified Cybersecurity Analyst

Senior Manager, Cybersecurity

Information Systems Security Engineer

Get Security Assessment And Authorization Cybersecurity Jobs alerts