Cyber Mission Specialist

About the role

Booz Allen is looking for an experienced Cyber Mission Specialist to apply knowledge of network security, risk management and continuous monitoring to support national security. The role performs continuous monitoring and authorization reassessment activities for an IaaS or PaaS Cloud Security Officer (CSO) at the client's Contractor Network Operations Center, and informs operators and senior leadership about adversarial tactics, techniques and procedures for cloud security.

Key responsibilities

• Review artifacts such as boundary diagrams, data flow diagrams, configurations, code, container or application vulnerability scan results to help determine the security impact of Cloud Service Provider (CSP) changes.
• Review monthly executive summaries or reports on continuous monitoring, flagging areas where the CSO's security posture may be degrading.
• Review CSP-submitted Acceptance of Risk (AOR) and Deviation Requests (DR), including mission impact assessments and mitigation efforts, and make approval or disapproval recommendations to the client.
• Work with a U.S.-based Third-Party Assessment Organization (3PAO) team to run quarterly risk review board reviews and annual authorization reassessments of the CSO, its cloud infrastructure and supporting infrastructure.
• Support the development of operation plans for command and control.

Required profile

• 5+ years of experience with control assessment in frameworks such as NIST SP 800-53r4/5, ISO or IEC 27001:2022, or SOC 2.
• Bachelor's degree in a science field.
• Certification such as CISSP, CISA, ISO 27001 or ISO 17020.
• Nice to have: FedRAMP 3PAO experience, Oracle Cloud Infrastructure Foundations Associate certification, CMMC Level 2 assessor certification, Identity Statement, and willingness to undergo identity verification with biometrics and to appear on camera during interviews.

Required skills

• Governance, Risk and Compliance (GRC) tool experience (2+ years)
• Continuous monitoring and authorization reassessment