Cyber Mission Specialist

About the role

Booz Allen is looking for an experienced Cyber Mission Specialist to apply knowledge of network security, risk management and continuous monitoring to support national security. The role performs continuous monitoring and authorization reassessment activities for an IaaS or PaaS Cloud Security Officer (CSO) at the client's Contractor Network Operations Center, and informs operators and senior leadership about adversarial tactics, techniques and procedures for cloud security.

Key responsibilities

• Review artifacts such as boundary diagrams, data flow diagrams, configurations, code, container or application vulnerability scan results to help determine the security impact of Cloud Service Provider (CSP) changes.
• Review monthly executive summaries or reports on continuous monitoring to show ongoing control effectiveness and flag areas where the CSO's security posture may be degrading.
• Review CSP-submitted Acceptance of Risk (AOR) and Deviation Requests (DR), including mission impact assessments and mitigation efforts, and make approval or disapproval recommendations to the client.
• Work with a U.S.-based Third-Party Assessment Organization (3PAO) team to run quarterly risk review board reviews and annual authorization reassessments of the CSO, its underlying cloud infrastructure and supporting infrastructure.
• Assess and report on adversarial tactics, techniques and procedures for cloud security, and support the development of operation plans for command and control.

Required profile

• 5+ years of experience with control assessment in frameworks or standards such as NIST SP 800-53r4/5, ISO or IEC 27001:2022, or SOC 2.
• 2+ years of experience with a Governance, Risk and Compliance (GRC) tool.
• Bachelor's degree in a science field.
• Certification such as CISSP, CISA, ISO 27001 or ISO 17020.

Nice to have

• FedRAMP 3PAO experience.
• Oracle Cloud Infrastructure Foundations Associate certification.
• CMMC Level 2 Assessor, CCP, CCA or LCCA certification.
• Identity statement.

Candidates must complete an identity verification process using biometrics and artificial intelligence, and are expected to be on camera during interviews and assessments. Use of AI tools to assist interview responses is prohibited unless permission is granted.