See all jobs on Scoutfield
Search thousands of fresh jobs every day.
- Fresh listings
- Fast filters
- No subscription required

Cloud Security Risk Analyst
Booz Allen Hamilton. Define, communicate, and implement cybersecurity architecture and security assurance processes for systems operating in Microsoft Azure and Amazon Web Services (AWS) across IL2 and IL5 cloud environments .
Core Competencies
Role fitUse this summary to align your resume positioning with the role.
Demonstrates expertise in cybersecurity architecture and security assurance processes within Microsoft Azure and AWS environments, focusing on Risk Management Framework (RMF) activities and compliance with federal cybersecurity regulations. Proficient in generating A&A documentation and conducting security control assessments to support continuous monitoring and secure cloud solutions.
ATS Keywords
Tailor your resumeTip: use these terms in your resume and cover letter to boost ATS matches.
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Define, communicate, and implement cybersecurity architecture and security assurance processes for systems operating in Microsoft Azure and Amazon Web Services (AWS) across IL2 and IL5 cloud environments
- Collaborate as a core member of a 6-to-8-person Cybersecurity Team with the team lead, system engineers, and project managers
- Ensure secure design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains
- Own and execute full lifecycle Risk Management Framework (RMF) activities
- Prepare Authorization and Accreditation (A&A) documentation
- Perform security control assessments
- Support achieving and maintaining Authority to Operate (ATO)
- Engage with and present security findings to DoW leadership
- Support security reviews within DevSecOps pipelines and recurring release cycles
- Generate RMF Body of Evidence and A&A artifacts for federal systems
Requirements
What you’ll need- Experience securing systems, performing authorization activities, and writing RMF security documentation
- Experience with secure cloud architectures such as Azure or AWS
- Experience developing RMF Body of Evidence for federal systems
- Experience with compliance tools such as Nessus, ACAS, SCAP, STIG Viewer, SRGs, or eMASS
- Experience with scripting or automation such as Bash for scanning, monitoring, or compliance support
- Experience supporting security reviews within DevSecOps pipelines and recurring release cycles
- Experience with RMF terminology, A&A processes, and federal cybersecurity regulations
- Top Secret clearance
- HS diploma or GED
- DoD 8570 or 8140 IAT Level II Certification
- Experience securing IL2 and IL5 cloud architectures and hybrid on-prem and cloud connections
- Experience with continuous monitoring solutions and Agile-based workflows
- Experience in Red Hat Enterprise Linux (RHEL) or Windows system administration
- Experience as an ISSO or ISSE in DoD or federal programs
- Experience generating A&A artifacts under NIST SP 800-53, DoD RMF, or ICD 503
- Knowledge of IT system development, acquisition, and sustainment in federal environments
- Bachelor's degree is listed as a nice-to-have qualification
Benefits
Comp & perks- Health benefits
- Life insurance
- Disability benefits
- Financial benefits
- Retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
- Recognition awards program for exceptional performance and superior demonstration of values