RMF Cybersecurity Analyst
Booz Allen Hamilton
About the Role
The Opportunity: To build your knowledge as an information security risk specialist who knows how to break down complex threats into manageable plans of action. As an information security risk specialist on our team, you’ll work with DoD organizations to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from on-site members to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take an active role in information security while growing your skills in cloud technology, cybersecurity, and risk management.
Key Responsibilities
- Work with DoD organizations to discover their cyber risks.
- Understand policies and develop a mitigation plan.
- Gather technical, environmental, and personnel details to assess the threat landscape.
- Guide clients through a plan of action with presentations, whitepapers, and milestones.
- Translate security concepts for clients to help them make informed decisions to secure mission-critical systems.
Requirements & Tech Stack
- Cybersecurity policy
- DoD Risk Management Framework (RMF)
- Enterprise Mission Assurance Support Service (eMASS)
- Security Technical Implementation Guides (STIGs)
- Assured Compliance Assessment Solution (ACAS)
- Security Content Automation Protocol (SCAP)
- Hardening systems
- Applying security control
- Secret clearance
Qualifications
- HS diploma or GED
- Security+ OR Certified Information Security Manager (CISM) OR Certified Information System Security Professional (CISSP) Certification
Nice To Have
- Experience as an operating systems administrator, systems engineer, requirements analyst, information systems security officer, information systems security manager, or information systems security engineer
- Experience with the Ports, Protocols, and Services (PPS) Matrix
- Experience with Vulnerability Remediation Asset Manager (VRAM)
- Experience with Host Based Security System (HBSS)
- Ability to analyze procedures, standard operating procedures, and RMF policies
Compensation Range: $61,900.00 to $141,000.00 (annualized USD)
Clearance: Secret clearance is required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.