Booz Allen Hamilton je svetovalno podjetje za upravljanje in tehnologijo, ki vladnim in komercialnim naročnikom zagotavlja napredno tehnično in strateško strokovno znanje. Njegovo delo obsega nacionalno varnost, obrambo, obveščevalno dejavnost, civilno upravo in kritično infrastrukturo ter združuje ekipe, osredotočene na umetno inteligenco, kibernetsko varnost, računalništvo v oblaku, digitalno preobrazbo, inženiring ter podporo misijam in operacijam. Podjetje se posebej posveča kompleksnim izzivom z visokimi zahtevami glede varnosti in zanesljivosti za vojaške, obveščevalne in zvezne agencije ter izbrane komercialne sektorje.
Cloud Security Risk Analyst
Secure Booz Allen’s Azure and AWS modernization programs for the Department of Defense. Manage RMF authorization, compliance assessments, and ATO support across IL2 and IL5 environments.
Opis
- Design and implement cybersecurity architecture and assurance processes for Azure and AWS systems in IL2 and IL5 cloud environments.
- Work as part of a 6–8 person cybersecurity team alongside the team lead, system engineers, and project managers.
- Keep cloud solutions secure through design, implementation, verification, and continuous monitoring across network domains.
- Lead Risk Management Framework activities from start to finish.
- Prepare and maintain A&A documentation.
- Assess security controls.
- Help secure and maintain Authority to Operate (ATO).
- Present security findings to Department of War leadership.
- Review security in DevSecOps pipelines and recurring release cycles.
- Assist with scanning, monitoring, and compliance using scripts or automation.
Zahteve
- At least four years securing computer systems, conducting DoD authorization activities, and writing RMF security documentation.
- At least four years in secure cloud architecture, preferably with Azure or AWS.
- Experience developing RMF Bodies of Evidence for DoD systems.
- Familiarity with compliance tools such as ACAS, SCAP, STIG Viewer, SRGs, or eMASS.
- Experience using scripting or automation, such as Bash, to support scanning, monitoring, or compliance.
- Experience supporting security reviews in DevSecOps pipelines and recurring release cycles.
- Knowledge of RMF terminology, A&A processes, and federal cybersecurity regulations.
- Active TS/SCI clearance required.
- High school diploma or GED.
- DoD 8570/8140 IAT Level II certification.
- Experience securing IL2 and IL5 cloud architectures and hybrid on-premises and cloud connections.
- Experience with continuous monitoring tools and Agile workflows.
- Experience administering Red Hat Enterprise Linux (RHEL) or Windows systems.
- Experience as an ISSO or ISSE on DoD or federal programs.
- Experience producing A&A artifacts under NIST SP 800-53, DoD RMF, or ICD 503.
- Knowledge of IT system development, acquisition, and sustainment in federal environments.
- Bachelor’s degree preferred.
Ugodnosti
- Health coverage.
- Life insurance benefits.
- Disability benefits.
- Financial benefits.
- Retirement benefits.
- Paid leave.
- Professional development opportunities.
- Tuition assistance.
- Work-life programs.
- Dependent care benefits.
- Recognition awards program.
- Support for identity verification and interview or assessment processes.