Booz Allen Hamilton is a management and technology consulting company serving government and commercial clients with advanced technical and strategic expertise. Its work spans national security, defense, intelligence, civil government, and critical infrastructure, bringing together teams focused on artificial intelligence, cybersecurity, cloud computing, digital transformation, engineering, and mission and operations support. The company is particularly engaged in complex, high-assurance challenges for military, intelligence, and federal agencies, alongside selected commercial sectors.
Cloud Security Risk Analyst
Secure Booz Allen’s Azure and AWS modernization programs for the Department of Defense. Manage RMF authorization, compliance assessments, and ATO support across IL2 and IL5 environments.
Description
- Design and implement cybersecurity architecture and assurance processes for Azure and AWS systems in IL2 and IL5 cloud environments.
- Work as part of a 6–8 person cybersecurity team alongside the team lead, system engineers, and project managers.
- Keep cloud solutions secure through design, implementation, verification, and continuous monitoring across network domains.
- Lead Risk Management Framework activities from start to finish.
- Prepare and maintain A&A documentation.
- Assess security controls.
- Help secure and maintain Authority to Operate (ATO).
- Present security findings to Department of War leadership.
- Review security in DevSecOps pipelines and recurring release cycles.
- Assist with scanning, monitoring, and compliance using scripts or automation.
Requirements
- At least four years securing computer systems, conducting DoD authorization activities, and writing RMF security documentation.
- At least four years in secure cloud architecture, preferably with Azure or AWS.
- Experience developing RMF Bodies of Evidence for DoD systems.
- Familiarity with compliance tools such as ACAS, SCAP, STIG Viewer, SRGs, or eMASS.
- Experience using scripting or automation, such as Bash, to support scanning, monitoring, or compliance.
- Experience supporting security reviews in DevSecOps pipelines and recurring release cycles.
- Knowledge of RMF terminology, A&A processes, and federal cybersecurity regulations.
- Active TS/SCI clearance required.
- High school diploma or GED.
- DoD 8570/8140 IAT Level II certification.
- Experience securing IL2 and IL5 cloud architectures and hybrid on-premises and cloud connections.
- Experience with continuous monitoring tools and Agile workflows.
- Experience administering Red Hat Enterprise Linux (RHEL) or Windows systems.
- Experience as an ISSO or ISSE on DoD or federal programs.
- Experience producing A&A artifacts under NIST SP 800-53, DoD RMF, or ICD 503.
- Knowledge of IT system development, acquisition, and sustainment in federal environments.
- Bachelor’s degree preferred.
Benefits
- Health coverage.
- Life insurance benefits.
- Disability benefits.
- Financial benefits.
- Retirement benefits.
- Paid leave.
- Professional development opportunities.
- Tuition assistance.
- Work-life programs.
- Dependent care benefits.
- Recognition awards program.
- Support for identity verification and interview or assessment processes.