Information Security Risk Specialist

Booz Allen Hamilton

9d • $61,900 - $141,000

About The Position

As an Information Security Risk Specialist at Booz Allen, you will help government and military clients understand cyber risks and develop plans to mitigate them. You will gather technical and personnel information from subject matter experts to assess the threat landscape, help clients understand applicable policies, and guide them through actionable mitigation plans using presentations, white papers, and milestones. The role offers an opportunity to build experience in strategic information security and develop cybersecurity skills while helping protect national cyber infrastructure.

Requirements

• Experience supporting DoD system authorization and Authorization to Operate (ATO) activities.
• Experience analyzing and prioritizing vulnerability scan results, developing and maintaining hardware and software inventories, tracking vulnerabilities, and supporting remediation activities.
• Experience developing and supporting Security Assessment Plans (SAPs), Security Assessment Reports (SARs), RMF artifacts, control assessments, and authorization packages in accordance with DoD RMF requirements.
• Knowledge of Ports, Protocols, and Services Management (PPSM).
• Ability to work in a structured, compliance-driven environment and execute established cybersecurity processes with minimal supervision.
• Secret clearance.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering.
• DoD 8140, 752- Cyber Policy and Strategy Planner, Intermediate Certification.

Nice To Haves

• Experience leading and executing the DoD Risk Management Framework (RMF) for DoD information systems, including full lifecycle implementation across RMF steps, applying DoD and DoD Component cybersecurity policies, procedures, and directives, and developing and managing Plans of Actions and Milestones (POA&M).
• Experience reviewing, interpreting, and enforcing Security Technical Implementation Guides (STIGs) using STIG Viewer.
• Experience using eMASS and ACAS within a DoD environment.
• Top Secret clearance.
• Master’s degree.

Responsibilities

• Support DoD system authorization and Authorization to Operate (ATO) activities.
• Analyze and prioritize vulnerability scan results, maintain hardware and software inventories, track vulnerabilities, and support remediation.
• Develop and support Security Assessment Plans (SAPs), Security Assessment Reports (SARs), RMF artifacts, control assessments, and authorization packages in accordance with DoD RMF requirements.
• Gather technical and personnel details from subject matter experts to assess the threat landscape.
• Help clients understand applicable policies and develop cybersecurity risk mitigation plans.
• Guide clients through mitigation plans using presentations, white papers, and milestones.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time