Information Security Risk Specialist

Booz Allen Hamilton•Arlington, VA

1d•$62,000 - $141,000

About The Position

Information Security Risk Specialist The Opportunity: Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—an information security risk specialist who will break down complex threats into manageable plans of action. As an Information Security Risk Specialist on our team, you’ll use your experience to discover cyber risks, understand applicable policies, and develop a mitigation plan. You’ll review technical and personnel details to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts so they can make the best decisions to secure their systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in cloud computing. Work with us as we protect our nation's infrastructure. Join us. The world can’t wait.

Requirements

5+ years of experience in a cybersecurity role leading DoD RMF accreditation processes for cloud environments such as AWS or Azure
5+ years of experience with STIGs, eMASS or Xacta, Splunk, Tenable Nessus, and Trellix ESS
Experience presenting complex security findings to various stakeholders such as technical engineers, clients, and AO offices
Experience working through challenging security requirements
Experience developing technical documentation such as HW, SW, or Topology Diagrams
Experience implementing NIST 800-53rev5 security controls
Top Secret clearance
Bachelor's degree
DoD 8140 IAM Certification such as Security+ or CISSP Certification
DoD ACAS Certification

Nice To Haves

Possession of excellent problem-solving skills
DoD ESS 201/301 Certifications
Security or Cloud Certifications such as CGRC, AWS CCP, or AWS Security Certification