Continuous Monitoring Analyst

Booz Allen Hamilton Holding Corporation
Rockville, MD, United States
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$62,000.0 - $141,000.0
Working hours
Regular working hours
Job source

Tech stack

Artificial Intelligence Amazon Web Services Microsoft Azure Cloud Computing Security Cyber Security Information Systems Continuous Integration DevOps Identity and Access Management Ansible Zero Trust Network Access Curam Configuration Tools
+9 more
Okta Git Kubernetes Terraform Splunk SentinelOne Expertise Docker Security Orchestration, Automation & Response Servicenow

Job description

Serve as a Continuous Monitoring Analyst responsible for supporting an enterprise-wide ongoing authorization program, ensuring systems maintain their Authority to Operate (ATO)/Continuous Authority to Operate (cATO) through continuous monitoring of security controls, evidence collection, risk tracking, and reporting. You will assess control effectiveness, validate system changes, support remediation activities, and help modernize continuous monitoring processes across hybrid and cloud environments. This position strengthens the organization’s risk posture by enabling consistent, automated, and compliance-aligned security oversight.

Requirements

Do you have experience in Vuls?, Do you have a Bachelor’s degree?, * 3+ years experience with Continuous Monitoring, ongoing authorization, or cybersecurity

  • Experience with monitoring and assessing NIST SP 800-53 controls, including collecting and evaluating control evidence generated from Splunk, Cribl, SentinelOne, or Elastic
  • Experience with supporting continuous ATO and ongoing authorization processes using data from Tenable, Prisma, Git, JFrog, AWS Security Hub, Azure Security Tower, or Google SCC vulnerability and configuration tools
  • Experience with reviewing POA&Ms, validating remediation evidence, and tracking corrective actions through ServiceNow or JCAM
  • Experience with analyzing system changes, configuration updates, or architectural modifications for security impact across cloud or hybrid environments
  • Experience with security automation or orchestration workflows using Kubernetes, Docker, Terraform, or Ansible, and identifying or interpreting AI-generated findings using Gemini, Copilot, Claude, or Bedrock
  • Knowledge of enterprise IAM and access control concepts supported by Entra ID, Okta, AWS IAM, or Microsoft Conditional Access tools
  • Ability to evaluate control effectiveness, synthesize evidence from multiple security tools, and communicate risk posture to technical and non-technical stakeholders
  • Public Trust
  • Bachelor’s degree

Nice If You Have:

  • Experience with cross-functional collaboration with ISSOs, system owners, or engineering teams to support RMF lifecycle activities
  • Experience with process improvement, workflow standardization, or automation of continuous monitoring or ATO processes
  • Experience with dashboards, reporting, or enterprise governance tools that aggregate security telemetry
  • Experience with stakeholder engagement, team coordination, or agile delivery support
  • Knowledge of Zero Trust principles, cloud security governance, or enterprise modernization initiatives
  • Knowledge of secure DevOps practices, CI/CD workflows, or automated compliance pipelines
  • Ability to clearly communicate complex compliance, risk, or control concepts in actionable terms
  • Ability to adapt quickly to evolving federal guidance, emerging technologies, or shifting program priorities
  • Master’s degree in Cybersecurity, Information Systems, or related field
  • CISSP, Security+, or AWS, GCP, or Azure cloud certifications

Vetting:

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client; Public Trust determination is required.

Benefits & conditions

Pulled from the full job description

  • Tuition reimbursement
  • Health insurance
  • Retirement plan
  • Flexible spending account, At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $62,000.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

About the company

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

  • Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
  • Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
  • Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:51 min

Transitioning to continuous security operations and automated system hardening

Thomas Fuchs +3 · LIVE

2:07 min

Inspecting default bridge architectures and custom Docker networks

Oliver Seitz Oliver Seitz · WWC 2025

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann +2 · LIVE

6:21 min

Investigating push inefficiencies with upstream Git experts

Jonathan Creamer · Coffee With Developers

2:34 min

Docker sandbox architecture and microVM environment integration

Manuel de la Peña Manuel de la Peña · WWC Europe 2026

4:37 min

Architecting single sign-on flows across multiple application domains

Gift Egwuenu · WWC 2023

Videos

See all

Related articles

See all