Apply on Employer Site

Booz Allen Hamilton · 10 hours ago

Cybersecurity Risk Analyst

San Diego, CA

Full-time

Hybrid

Mid, Senior Level

$99K/yr - $225K/yr

7+ years exp

Booz Allen Hamilton is seeking a Cybersecurity Risk Analyst to advance experience in information assurance and cybersecurity policy. The role involves developing and implementing security solutions to protect military missions, troubleshooting complex challenges, and assessing vulnerabilities.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management

Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises

Perform risk and vulnerability assessments in network, system, and application areas

Leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise

Qualification

Navy Risk Management FrameworkCybersecurity compliance testingVulnerability analysisEMASSDoD 8140 CertificationWindowsLinuxCommunication skillsProblem-solvingTeam collaborationLeadership

Required

7+ years of experience supporting Navy Risk Management Framework (RMF), including Assessment and Authorization (A&A) activities, development of RMF artifacts, and deliverables across all steps

4+ years of experience performing cybersecurity compliance testing using industry standard tools, including Assured Compliance Assessment Solution (ACAS), DoD Security Technical Implementation Guides (STIGs), and Evaluate-STIG

Experience with eMASS, including security plan development and hands-on processing of packages through workflows, analyzing security policies, evaluating assessment documentation, and developing written security risks, mitigations, and recommendations

Experience performing vulnerability analysis of networks, systems, and communications protocols, communicating risks, findings, and status updates proactively to client leadership in a clear and actionable way, and with operating systems, platforms, and technologies, including Windows, Linux, cloud, or virtualization

Ability to investigate and resolve issues that span multiple applications or technologies and require involvement from technical personnel across multiple organizations

Ability to lead security authorization activities and coordinate with stakeholders such as system owners, engineers, and validators

Ability to devise and execute client deliverables, work independently, identify problems, devise analysis and solutions, communicate results, and lead the accomplishments of client tasks from inception to completion

Secret clearance

Bachelor's degree in CS, Computer Engineering, Systems Management, or IT

DoD 8140 Certification

Preferred

Experience leading meetings and developing presentations and briefings for use by senior leaders

Experience analyzing technical and policy documentation for DoD organizations and implementing DoD directives

Experience deploying, implementing, maintaining, and integrating cybersecurity tools and applications

Experience with network engineering functions, including Windows, Linux, and virtual operating systems, security tools, platforms, and technologies, including network and web application firewalls, web proxy, intrusion prevention systems, vulnerability scanners, and penetration tools

Knowledge of DoD enterprise and tactical networks, including command and control and battlespace management systems, systems engineering and information technology, cloud architecture, and virtualization

Ability to meet cyber schedule, performance, and quality metrics within the systems development lifecycle and acquisition lifecycle, and articulate industry best practice cybersecurity and threat-based cybersecurity frameworks and trends

Top Secret clearance

Master's degree in CS, Computer Engineering, Systems Management, or IT

OS Certification

CEH, CISA, or CISSP Certification