Cloud Security & RMF Risk Analyst (Azure/AWS)

Booz Allen Hamilton; McLean (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cloud Security Information Security Risk Analyst to support DoD cloud modernization in an IL2/IL5 environment. You will own RMF activities, create security documentation, and interact with DoD leadership to present findings.

The role involves securing Azure and AWS workloads, collaborating with a tight Cybersecurity Team, system engineers, and project managers to ensure secure design, implementation, verification, and continuous monitoring across multiple

Qualifications

• 4+ years experience securing DoD systems and RMF documentation.
• 4+ years experience with secure cloud architecture (Azure/AWS).
• Experience developing RMF Body of Evidence for DoD systems.
• Experience with compliance tools: ACAS, SCAP, STIG Viewer, SRGs, eMASS.
• Scripting/automation experience (Bash) for scanning or monitoring.
• DevSecOps security reviews and release cycle support.
• RMF terminology, A&A processes, and federal cyber regulations.
• TS/SCI clearance.
• HS diploma or GED.
• DoD 8570/8140 IAT Level II Certification.

Responsibilities

• Define and implement RMF security processes for cloud systems.
• Lead security assessments and ATO activities.
• Present findings to DoD leadership.
• Collaborate with Cybersecurity Team, system engineers, and PMs.
• Monitor secure design across Azure and AWS.

Skills

RMF knowledge

DevSecOps experience

Bash scripting

A&A processes

Federal regulations

TS/SCI clearance

DoD 8570/8140 IAT II

Education

HS diploma or GED

Bachelor's degree preferred

Tools

ACAS

SCAP

STIG Viewer

SRGs

eMASS

Job description

Booz Allen Hamilton is seeking a Cloud Security Information Security Risk Analyst to support DoD cloud modernization in an IL2/IL5 environment. You will own RMF activities, create security documentation, and interact with DoD leadership to present findings.

The role involves securing Azure and AWS workloads, collaborating with a tight Cybersecurity Team, system engineers, and project managers to ensure secure design, implementation, verification, and continuous monitoring across multiple