Enterprise Cybersecurity Product Analyst

About the role

The ideal candidate for our Enterprise Cybersecurity team is technically inclined, intellectually curious, and adaptable, with a strong cyber-defense mindset. They thrive in a fast-paced, dynamic environment and are continuous learners who actively seek to understand complex challenges, ask thoughtful questions, and look beyond the obvious to identify innovative and effective ways of working. They bring a security-first perspective, analytical problem-solving skills, and the curiosity and aptitude to continuously evolve as threats, technologies, and mission needs change.

Responsibilities

• Support product security architecture and design reviews for Market Product and related Product initiatives, partnering with Product Security leadership, BISO, and product engineering teams.
• Apply secure-by-design and threat modeling practices across product reviews and help product teams adopt these patterns in their own design workflows.
• Maintain and improve product security gates, intake workflows, and dashboard-based tracking of review status, decisions, and outcomes.
• Develop reusable guidance, templates, standards, and decision records for product teams, including architecture documentation patterns and control documentation expectations.
• Track product security risks and mitigation actions, and communicate status, decisions, and outstanding items clearly to product, engineering, and ECS stakeholders.
• Help define and operationalize repeatable Product Security processes that improve speed, quality, and governance alignment across the product portfolio.
• Contribute to policy and standards development for product-facing cybersecurity practices, supporting the emerging Product Security operating model.

Requirements

• 3+ years of experience in product security, application security, cybersecurity engineering, or security architecture support roles.
• Experience supporting architecture or design reviews for software, platform, or cloud-enabled products.
• Knowledge of secure-by-design principles, threat modeling methods, and modern cybersecurity control frameworks.
• Knowledge of product lifecycle security practices, including requirements, design, implementation, and operational risk management.
• Ability to synthesize technical findings into clear, actionable guidance for engineering and non-engineering stakeholders.
• Able to build and maintain structured tracking mechanisms for security review workflows and decisions.
• Able to influence technical and non-technical stakeholders.
• Able to obtain a Secret clearance.

Qualifications

• Bachelor's degree.

Skills

• Experience supporting security review workflows for product portfolios or enterprise-scale delivery organizations.
• Experience creating reusable artifacts, such as standards, playbooks, templates, and decision records.
• Knowledge of cloud and hybrid security fundamentals across identity, networking, logging, and platform controls.
• Experience working with product engineering or platform teams in a security advisory or partnership capacity.
• Strong written and verbal communication skills.
• Security certifications such as Security+, CISSP, CSSLP, CCSP, or cloud security certifications.

Benefits

• Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.
• Recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values.

Pay

The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD).

Schedule

This position is located in McLean, VA.