DoD Cyber Risk & DevSecOps Security Analyst

Booz Allen Hamilton; McLean (VA); Hybrid; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton in McLean, VA is seeking an Information Security Risk Specialist to help clients identify cyber risks, evaluate policies, and craft mitigation plans for DoD systems in AWS, Azure, or hybrid environments.

You will translate security concepts for stakeholders, develop actionable roadmaps, and produce white papers and milestones to strengthen risk management and cybersecurity resilience across projects.

Qualifications

• 5+ years of experience in a professional IT environment.
• 3+ years of cybersecurity and Assessment and Authorization (A&A) for DoD environments.
• Experience supporting federal government or DoD ATO packages and RMF.
• Experience with cloud environments (AWS, Azure, or hybrid) and containerized workloads.
• Familiarity with NIST SP 800-53, CNSSI 1253, SSPs, POA&Ms, SAPs, risk assessments, and continuous monitoring.

Responsibilities

• Identify cyber risks and analyze applicable policies with SMEs and engineers.
• Develop comprehensive mitigation strategies and actionable remediation plans.
• Present findings through white papers, presentations, and defined milestones.
• Guide clients through risk-based decisions to secure DoD systems.
• Collaborate on DevSecOps integration and cloud security across projects.

Skills

Information security

Risk assessment

A&A

RMF

NIST SP 800-53

CNSSI 1253

Continuous monitoring

DevSecOps

Cloud security

Communication

Education

HS diploma or GED

Bachelor’s degree in IT or Cybersecurity

Security+ certification within 30 days

Tools

ACAS

SCAP

STIGs

eMASS

Xacta

Job description

Booz Allen Hamilton in McLean, VA is seeking an Information Security Risk Specialist to help clients identify cyber risks, evaluate policies, and craft mitigation plans for DoD systems in AWS, Azure, or hybrid environments.

You will translate security concepts for stakeholders, develop actionable roadmaps, and produce white papers and milestones to strengthen risk management and cybersecurity resilience across projects.