Cybersecurity Analyst, Junior

Booz-Allen-Hamilton; City of Rome (NY); On-site; USD 90,000 - 130,000; Full time

Job summary

Booz Allen is seeking a Cybersecurity Risk Analyst to assess and inform on adversarial tactics, evaluate system security implementations, and support A&A across the SDLC. You will apply RMF A&A guidance, ST&E, and NIST controls to identify weaknesses and recommend mitigations.

Collaborate with engineers and leadership to deliver mission-ready cybersecurity solutions across multiple technology domains and maintain readiness for formal security reviews and decision making.

Qualifications

• Experience in a cybersecurity or computer field, including supporting information assurance, networking, or systems administration.
• Experience with applying system security configurations to meet compliance standards.
• Knowledge of Cybersecurity standards and the implementation of industry best practices.
• Knowledge of Risk Management practices.
• Ability to create written or verbal communication products for review.
• Ability to obtain a Secret clearance.
• RMF A&A processes and Cybersecurity engineering (nice to have).
• Experience with Enterprise Mission Assurance Support Service (eMASS).
• Experience with Cloud and DevSecOps (nice to have).
• Knowledge of STIG and compliance scans (nice to have).
• Possession of excellent time management and analytical skills (nice to have).
• Security+ CE Certification (nice to have).

Responsibilities

• Understand cyberspace capabilities to evaluate weaknesses and the effectiveness of mitigations for cybersecurity solutions.
• Work with teams to aggregate threat feeds and prepare briefings for senior leadership.
• Support Assessment and Authorization (A&A) throughout the SDLC.
• Provide recommendations to decision makers and engineers on system security implementations.
• Contribute to operation plans to support command and control across technology areas.

Skills

Cybersecurity experience

Info assurance

Networking experience

Systems administration

Written/verbal communication

Secret clearance

Tools

eMASS

RMF A&A

STIG

DevSecOps

Cloud platforms

Compliance scans

Job description

Join a culture of empowerment and connectivity.

Develop your craft

Learn the skills you need to accelerate your career.

Discover benefits that support your life and work.

Innovate with intention

Build mission-ready tech that protects the nation.

As a Cybersecurity Risk Analyst, you understand the value of hunt-forward operations, and you know that battles are won in the grey. At Booz Allen, you can use your cyberspace operations experience to create solutions that will be executed on a worldwide stage. We're looking for a Cybersecurity Risk Analyst like you to apply your experience in various cybersecurity areas, including Department of Defense (DoD) Risk Management Framework (RMF) guidance, Security Test and Evaluation (ST&E), system vulnerability, and compliance in support of Assessment and Authorization (A&A) throughout the System Development Life Cycle (SDLC).

In this role, you'll be counted on to help understand cyberspace capabilities to evaluate potential weaknesses as well as the effectiveness of mitigations for cybersecurity solutions. You will work with your team to leverage cyberspace operations systems to aggregate threat feeds that inform briefings for senior leadership aligned to support the research of emerging technology, requisite security requirements, and emerging threats, and develop a way forward to meet organizational goals. You'll work with headquarters-level decision makers on the technical implementation of solutions for promoting the sustainment of cybersecurity across multiple technology areas.
This is an opportunity to use your research and analysis abilities to adequately assess and inform operators and senior leadership and commanders on dynamic adversarial tactics, techniques, and procedures to support system A&A efforts through cyber risk assessment, policy analysis, technology evaluations, and National Institute of Standards and Technology (NIST) security control validation. You'll apply expertise in technology to analyze system security implementations, application security, and provide recommendations to decision makers and engineers. Your role will be vital in the development of operation plans to support command and control.

Join us. The world can't wait.

You Have:

• Experience in a cybersecurity or computer field, including supporting information assurance, networking, or systems administration
• Experience with applying system security configurations to meet compliance standards
• Knowledge of Cybersecurity standards and the implementation of industry best practices
• Knowledge of Risk Management practices
• Ability to create written or verbal communication products for review
• Ability to obtain a Secret clearance

Nice If You Have:

• Experience with RMF A&A processes and Cybersecurity engineering
• Experience in working with the Enterprise Mission Assurance Support Service (eMASS)
• Experience with Cloud and DevSecOps
• Knowledge of STIG and compliance scans
• Possession of excellent time management and analytical skills
• Security+ CE Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life,