Apply on Employer Site

Booz Allen Hamilton · 21 hours ago

Cybersecurity Risk Management Framework Analyst

Norfolk, VA

Full-time

Hybrid

Senior Level

$87K/yr - $198K/yr

5+ years exp

Booz Allen Hamilton is a leading consulting firm, and they are seeking a Cybersecurity Risk Management Framework Analyst. The role involves supporting the U.S. Navy's cybersecurity operational test and evaluation missions by applying expertise in security design and ensuring compliance with cybersecurity policies.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Support cyber OT&E missions by applying expertise in enterprise and system-level security design throughout the development lifecycle

Ensuring alignment with evolving laws, regulations, and DoD and DON cybersecurity policies

Translating complex technical and environmental requirements into effective security architectures

Contributing to RMF efforts across all steps

Assisting in system categorization, policy documentation, control selection, and control implementation

Performing comprehensive assessments of management, operational, and technical security controls to evaluate their effectiveness

Providing RMF support outlined in the RMF Process Guide (RPG)

Providing project management and subject matter expertise to guide certification and accreditation activities for OT&E test infrastructure and toolsets

Working closely with internal stakeholders and external oversight organizations to ensure timely and compliant system approvals

Evaluating a new fleet system's network environment for new and evolving threats

Analyzing integrated Validated Online Lifecycle Threat (VOLT) reports with all-source intelligence

Conducting cyber ethical hacking activities to test a system's cyber resiliency

Supporting damage assessment activities to assess adversary capabilities

Reporting results to U.S. Navy Operational Test personnel

Qualification

Cybersecurity Risk Management FrameworkEnterprise security designDoD cybersecurity policiesCybersecurity CertificationsProject managementTestingEvaluationSubject matter expertiseTechnical security controls

Required

5+ years of experience designing and integrating enterprise and systems security throughout the development lifecycle

3+ years of experience conducting thorough assessments of RMF management, operational, and technical security controls within DoD IT systems

3+ years of experience providing project management and subject matter expertise for systems certification and accreditation efforts in accordance with DoD and DON cybersecurity policies and RMF guidance

Ability to travel up to 25% of the time

Secret clearance

HS diploma or GED