ISSO Security Analyst, Senior

Booz Allen Hamilton; McLean (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

Phase2 Technology is seeking a Senior Security Analyst to partner with VA ISO/ISSO, site managers, and stakeholders to drive RMF steps 0–6 and ATO activities. You will identify and mitigate risks, elevate issues to leadership, apply VA policies, and produce security documentation supporting ATO efforts. U.S.

citizenship is required. You will coordinate RMF steps, maintain security artifacts, and present complex ATO topics to clients while maintaining a strong security posture throughout system

Qualifications

• Experience supporting RMF steps, security categorizations and POA&M.
• Proficiency with NIST SP 800-53 controls, RMF, and system authorization processes.
• Experience developing secure installation plans and mitigation strategies.
• Strong analytical skills to evaluate authorization documents and remediation timelines.
• Excellent verbal and written communication skills.

Responsibilities

• Coordinate RMF steps 0–6 and ATO activities for VA IT systems, networks, hardware and software.
• Produce and maintain detailed security documentation and ATO deliverables.
• Translate security concepts into actionable recommendations for clients.
• Analyze authorization documents to identify gaps and schedule remediation with stakeholders.
• Manage large volumes of data with expiration dates across multiple systems.
• Lead client-facing meetings independently.
• Maintain Public Trust or Suitability/Fitness determinations as required.

Skills

Analytical skills

Verbal and written communication

Client-facing meetings

Education

Master’s degree in CS or Electronics Engineering

20+ years IT experience in lieu of a degree

Job description

As a Senior Security Analyst on our team, you will partner with the Veterans Affairs (VA) Information System Owners (ISO), Information System Security Officers (ISSO), site managers, and other stakeholders to coordinate and drive the completion of the Risk Management Framework (RMF) steps 0‑6 and Accountable Targeted Operations (ATO) activities. You will identify and mitigate risks, elevate project risks to leadership, apply VA authorization policies and processes, and provide information system security expertise. You will maintain the operational security posture for information systems throughout their lifecycle from acquisition to decommissioning and produce detailed security documentation supporting ATO activities. U.S. citizenship is required.

Responsibilities

• Coordinate and drive the completion of RMF steps 0‑6 and ATO activities for various IT systems, networks, hardware, and software.
• Produce and maintain detailed security documentation and ATO support deliverables.
• Translate security concepts into actionable recommendations and present complex ATO topics to clients.
• Analyze authorization documents against requirements to identify gaps, schedule remediation, and coordinate with stakeholders.
• Manage large volumes of discrete data with expiration dates across multiple systems.
• Lead client‑facing meetings independently.
• Maintain a Public Trust or Suitability/Fitness determination as required.

Qualifications

• 10+ years experience in IT with a master’s degree in CS or Electronics Engineering (or 20+ years experience in lieu of a degree).
• Experience supporting all RMF steps, security categorizations, creating and updating security artifacts and FISMA documents, control implementation details, and POA&M.
• Proficiency with NIST SP 800‑53 controls, RMF, and system authorization processes.
• Experience developing secure product installation plans and mitigation strategies.
• Strong analytical skills to evaluate authorization documents and schedule remediation.
• Excellent verbal and written communication skills.

Nice to Have

• Experience with Continuous Authorization and Monitoring (CAM).
• Experience working with the VA.
• Experience supporting ATOs for specialized devices.
• Ability to engage with staff and leadership at various levels.

Vetting

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.

Compensation

Salary range: $99,000.00 to $225,000.00 (annualized USD).

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.