Cloud Security Risk Analyst – RMF & DoD Compliance

VulnU; McLean (VA); Híbrido; USD 99.000 - 225.000; Jornada completa

Descripción de la vacante

Booz Allen Hamilton seeks a Cloud Security Information Security Risk Analyst to lead RMF activities for DoD cloud environments (Azure/AWS). You will own A&A documentation, security control assessments, and support ATO readiness while briefing leadership on risk findings. Strong scripting and DevSecOps experience are desired.

Ideal candidates have TS/SCI clearance, DoD 8570/8140 IAT II certification, and 4+ years in secure cloud architecture, RMF artifacts, and federal cybersecurity programs.

Formación

• 4 years of experience securing computer systems and writing RMF security documentation.
• Experience with secure cloud architecture in Azure or AWS.
• Experience developing RMF Body of Evidence for DoD systems.
• Familiarity with RMF terminology, A&A processes, and federal cybersecurity regulations.
• TS/SCI clearance and DoD 8570/8140 IAT Level II Certification.
• Scripting or automation experience (Bash).
• Experience with DevSecOps release cycles and security reviews.

Responsabilidades

• Own and execute full lifecycle RMF activities including A&A documentation and security control assessment.
• Support achieving and maintaining Authority to Operate (ATO).
• Present security findings to DoD leadership and stakeholders.
• Collaborate with system engineers and project managers to ensure secure cloud solutions.

Conocimientos

RMF and A&A

Cloud security

DoD regulations

DevSecOps

Security architecture

Communication to leadership

RMF Body of Evidence

Scripting (Bash)

ATO support

Risk management

Educación

HS diploma or GED

Bachelor's degree preferred

Herramientas

ACAS

SCAP

STIG Viewer

SRGs

eMASS

Descripción del empleo

Booz Allen Hamilton seeks a Cloud Security Information Security Risk Analyst to lead RMF activities for DoD cloud environments (Azure/AWS). You will own A&A documentation, security control assessments, and support ATO readiness while briefing leadership on risk findings. Strong scripting and DevSecOps experience are desired.

Ideal candidates have TS/SCI clearance, DoD 8570/8140 IAT II certification, and 4+ years in secure cloud architecture, RMF artifacts, and federal cybersecurity programs.