Booz Allen Hamilton — мемлекеттік органдар мен коммерциялық клиенттерге озық техникалық және стратегиялық сараптама ұсынатын басқару және технологиялар жөніндегі консалтингтік компания. Оның қызметі ұлттық қауіпсіздік, қорғаныс, барлау, азаматтық басқару және маңызды инфрақұрылым салаларын қамтиды. Компания жасанды интеллект, киберқауіпсіздік, бұлтты есептеу, цифрлық трансформация, инженерия, сондай-ақ миссиялар мен операцияларды қолдауға бағытталған мамандарды біріктіреді. Ол әскери, барлау және федералдық агенттіктерге, сонымен қатар жекелеген коммерциялық секторларға қатысты күрделі әрі жоғары сенімділікті талап ететін міндеттермен ерекше айналысады.
Cloud Security Risk Analyst
Secure Booz Allen’s Azure and AWS modernization programs for the Department of Defense. Manage RMF authorization, compliance assessments, and ATO support across IL2 and IL5 environments.
Сипаттама
- Design and implement cybersecurity architecture and assurance processes for Azure and AWS systems in IL2 and IL5 cloud environments.
- Work as part of a 6–8 person cybersecurity team alongside the team lead, system engineers, and project managers.
- Keep cloud solutions secure through design, implementation, verification, and continuous monitoring across network domains.
- Lead Risk Management Framework activities from start to finish.
- Prepare and maintain A&A documentation.
- Assess security controls.
- Help secure and maintain Authority to Operate (ATO).
- Present security findings to Department of War leadership.
- Review security in DevSecOps pipelines and recurring release cycles.
- Assist with scanning, monitoring, and compliance using scripts or automation.
Талаптар
- At least four years securing computer systems, conducting DoD authorization activities, and writing RMF security documentation.
- At least four years in secure cloud architecture, preferably with Azure or AWS.
- Experience developing RMF Bodies of Evidence for DoD systems.
- Familiarity with compliance tools such as ACAS, SCAP, STIG Viewer, SRGs, or eMASS.
- Experience using scripting or automation, such as Bash, to support scanning, monitoring, or compliance.
- Experience supporting security reviews in DevSecOps pipelines and recurring release cycles.
- Knowledge of RMF terminology, A&A processes, and federal cybersecurity regulations.
- Active TS/SCI clearance required.
- High school diploma or GED.
- DoD 8570/8140 IAT Level II certification.
- Experience securing IL2 and IL5 cloud architectures and hybrid on-premises and cloud connections.
- Experience with continuous monitoring tools and Agile workflows.
- Experience administering Red Hat Enterprise Linux (RHEL) or Windows systems.
- Experience as an ISSO or ISSE on DoD or federal programs.
- Experience producing A&A artifacts under NIST SP 800-53, DoD RMF, or ICD 503.
- Knowledge of IT system development, acquisition, and sustainment in federal environments.
- Bachelor’s degree preferred.
Артықшылықтар
- Health coverage.
- Life insurance benefits.
- Disability benefits.
- Financial benefits.
- Retirement benefits.
- Paid leave.
- Professional development opportunities.
- Tuition assistance.
- Work-life programs.
- Dependent care benefits.
- Recognition awards program.
- Support for identity verification and interview or assessment processes.