Cybersecurity Analyst

Booz Allen Hamilton

. Collaborate with contractor and DoD government system owners, system administrators, and developers to identify cyber risks .

Posted 9/17/2026full-timeMcLean • Virginia • United StatesMid-LevelSenior💰 $62,000 - $141,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity, particularly in Assessment and Authorization (A&A) and Risk Management Framework (RMF) for DoD systems. Proficient in cloud security, DevSecOps practices, and compliance with NIST standards, with a focus on delivering actionable remediation strategies and technical evaluations.

Highest-signal resume keywords

Cybersecurity ExpertiseAssessment And Authorization (A&A)Risk Management Framework (RMF)NIST SP 800-53 ComplianceDevSecOps Alignment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityTechnical EvaluationsSecurity Control AssessmentsArtifact GenerationRisk AssessmentsContinuous MonitoringContainerized EnvironmentsCompliance Testing ToolsDevSecOps PipelinesAWS/Azure Environments

Soft Skills

Excellent Verbal CommunicationExcellent Written Communication

Tools & Technologies

ACASSCAPSTIGsSRGsEMASSXactaKubernetesRancher

Certifications & Qualifications

Top Secret ClearanceDoD 8570 Level II Security+ Certification

Industry Keywords

DoD SystemsFederal GovernmentATO PackagesCloud-Native EnvironmentsContainer Orchestration Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityKubernetesLinuxTypeScript

About the role

Key responsibilities & impact

Collaborate with contractor and DoD government system owners, system administrators, and developers to identify cyber risks
Analyze applicable policies and develop comprehensive mitigation strategies
Evaluate technical infrastructure and personnel dynamics to assess the full threat landscape, using insights from SMEs and engineers
Guide clients through actionable remediation plans
Deliver solutions through presentations, detailed white papers, and well-defined milestones
Translate security concepts so clients can make informed decisions to secure critical DoD systems
Act as an information security subject matter expert
Broaden skills in DevSecOps and cloud security
Perform technical evaluations and security control assessments in cloud-native and containerized environments
Interface with engineering teams to align DevSecOps pipelines with cybersecurity policies
Perform A&A and RMF and conduct risk assessments for federal government or DoD systems
Generate artifacts, SSPs, POA&Ms, and SAPs and support continuous monitoring

Requirements

What you’ll need

5+ years of experience working in a professional IT environment
3+ years of experience in cybersecurity and Assessment and Authorization (A&A) supporting DoD environments
Experience supporting federal government or DoD ATO packages, performing A&A and RMF, and conducting risk assessments for federal government or DoD systems hosted in AWS, Azure, or hybrid cloud environments
Experience performing technical evaluations and security control assessments in cloud-native and containerized environments
Experience interfacing with engineering teams to align DevSecOps pipelines with cybersecurity policies
Experience with NIST SP 800-53, CNSSI 1253, artifact generation, SSPs, POA&Ms, SAPs, risk assessments, and continuous monitoring
Knowledge of compliance testing tools such as ACAS, SCAP, STIGs or SRGs, eMASS, or Xacta
Top Secret clearance is required
HS diploma or GED
Ability to obtain DoD 8570 Level II Security+ Certification within 30 days of start date
Nice If You Have: Experience with DevSecOps, Path-to-Production, and CI/CD
Nice If You Have: Experience administering Red Hat Enterprise Linux 8 or Windows Server 2019
Nice If You Have: Experience with cloud tools and container orchestration security
Nice If You Have: Knowledge of STIG and compliance scans
Nice If You Have: Ability to advise stakeholders on cloud security strategies and container orchestration security such as Kubernetes, Rancher, and platform hardening
Nice If You Have: Excellent verbal and written communication skills
Nice If You Have: TS/SCI clearance
Nice If You Have: Bachelor's degree in IT or Cybersecurity
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information
AI or other tools to assist with interview responses are prohibited unless permission is explicitly provided

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program for exceptional performance and superior demonstration of values
Identity verification process with advanced biometrics and artificial intelligence
Full-time employees and part-time employees working at least 20 hours per week are eligible for Booz Allen benefit programs