DoD Cyber Risk Analyst: Cloud & DevSecOps

Phase2 Technology; Fort Belvoir (VA); On-site; USD 62,000 - 141,000; Full time

Benefits offered by this job

Benefits package

Job summary

Booz Allen Hamilton seeks an Information Security Risk Specialist to collaborate with DoD/system owners, assess cyber risks, and develop remediation plans. You will work with SMEs to evaluate infrastructure and guide clients through risk mitigations, delivering clear solutions via documents and milestones.

The role emphasizes DevSecOps, cloud security, and compliance with NIST SP 800-53, CNSSI 1253, and related frameworks. Top Secret clearance and DoD experience are required.

Qualifications

• 5+ years in a professional IT environment.
• 3+ years cybersecurity/A&A for DoD environments.
• Experience with DoD ATO packages, RMF, risk assessments.
• Experience with cloud-native and containerized environments.
• Interface with engineering to align DevSecOps with cybersecurity policies.
• Familiarity with ACAS/SCAP/STIGs, eMASS or Xacta.
• Top Secret clearance required.
• HS diploma or GED required.
• Ability to obtain DoD 8570 Level II Security+ within 30 days.

Responsibilities

• Collaborate with DoD system owners to identify cyber risks and develop mitigations.
• Translate security concepts for decision-making and remediation planning.
• Deliver findings via presentations, white papers, and milestones.
• Guide clients through actionable remediation plans for risk management.
• Support DevSecOps and cloud security initiatives.

Skills

5+ years IT experience

3+ years cybersecurity

Security policy knowledge

Clearance: TS

Communication skills

Education

HS diploma or GED

Bachelor's in IT or Cybersecurity

Tools

ACAS

SCAP

STIGs

eMASS

Xacta

NIST SP 800-53

CNSSI 1253

Job description

Booz Allen Hamilton seeks an Information Security Risk Specialist to collaborate with DoD/system owners, assess cyber risks, and develop remediation plans. You will work with SMEs to evaluate infrastructure and guide clients through risk mitigations, delivering clear solutions via documents and milestones.

The role emphasizes DevSecOps, cloud security, and compliance with NIST SP 800-53, CNSSI 1253, and related frameworks. Top Secret clearance and DoD experience are required.