> Markdown version of [/jobs/ext/3760764-cloud-security-information-security-risk-analyst](https://www.wearedevelopers.com/jobs/ext/3760764-cloud-security-information-security-risk-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Information Security Risk Analyst

- **Company:** Booz Allen Hamilton Inc.
- **Location:** Fort Belvoir, VA, United States
- **Experience:** Experienced
- **Salary:** $99,000.0 - $225,000.0
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing Security, Cyber Security, Information Systems Security Architecture Professional, Red Hat Enterprise Linux, Cloud Services, Security Content Automation Protocol, Scripting, Cloud Platform System, Information Technology, Devsecops
- **Published:** October 15, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/88617741/1

## About the Role

* 4+ years of experience securing computer systems, performing DoD authorization activities, and writing RMF security documentation
 * 4+ years of experience with secure cloud architecture, preferably in Azure or AWS
 * Experience developing RMF Body of Evidence for DoD systems
 * Experience with compliance tools such as ACAS, SCAP, STIG Viewer, SRGs, or eMASS
 * Experience with scripting or automation such as Bash for scanning, monitoring, or compliance support
 * Experience supporting security reviews within DevSecOps pipelines and recurring release cycles
 * Experience with RMF terminology, A&A processes, and federal cybersecurity regulations
 * TS/SCI clearance
 * HS diploma or GED
 * DoD 8570/8140 IAT Level II Certification

Nice If You Have:

 * Experience securing IL2 and IL5 cloud architectures and hybrid onprem and cloud connections
 * Experience with continuous monitoring solutions and Agile-based workflows
 * Experience in Red Hat Enterprise Linux (RHEL) or Windows system administration
 * Experience as a ISSO or ISSE in DoD or federal programs
 * Experience generating A&A artifacts under NIST SP 80053, DoD RMF, or ICD 503
 * Knowledge of IT system development, acquisition, and sustainment in federal environments
 * Bachelor's degree preferred

## Description

The Cloud Security Information Security Risk Analyst serves as a mid to seniorlevel cybersecurity specialist supporting DoW cloud modernization and ongoing sustainment activities. The analyst defines, communicates, and implements cybersecurity architecture and security assurance processes for systems operating in Microsoft Azure and Amazon Web Services (AWS) across Impact Level (IL) 2 and IL5 cloud environments.

They work as a core member of a 6-8 person Cybersecurity Team, collaborating closely with the team lead, system engineers, and project managers to ensure secure design, implementation, verification, and continuous monitoring of cloud solutions across multiple network domains. The analyst owns and executes full lifecycle Risk Management Framework (RMF) activities-including A&A documentation, security control assessment, and support for achieving and maintaining Authority to Operate (ATO).

You will leverage communication and briefing skills, as you will regularly engage with and present security findings to DoW leadership.