Information Security Risk Specialist

Booz Allen Hamilton•Lexington, MA

1d•$61,900 - $141,000•Remote

About The Position

Conduct security assessments on DoD cloud environments using the Risk Management Framework (RMF). Assist in providing guidance on policies and procedures to ensure compliance within an accreditation boundary. Implement security strategies to control and manage organizational information risks. Assess information systems to determine risk exposure and develop documentation addressing system security requirements. Enhance information security education within the organization and team. Monitor the latest security technologies to ensure that project personnel remain in the know.

Requirements

3+ years of experience in a cybersecurity role
2+ years of experience with the DoD RMF accreditation processes
Experience with RMF, STIGs, NIST 800-53, NIST 800-37, AWS, Xacta, or eMASS
Experience implementing and maintaining security controls
Ability to work through challenging security requirements and maintain compliance
Ability to develop technical documentation to support accreditation efforts
Secret clearance
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering
DoD 8140 IAM Level 1 Certification

Nice To Haves

Experience implementing and maintaining security controls in a cloud-based environment
Experience with Cloud Security, including AWS, Azure, or GovCloud
Experience with Container Security, including Kubernetes or Docker
Experience with SIEM or SOAR, including Splunk, ElasticSearch, or OpenSearch
Experience with Atlassian Suite, including Jira or Confluence
Experience with Vulnerability Management tools and processes
Experience with STIGs and Cloud SRGs
Experience as an ISSM, ISSO, or ISSE

Responsibilities

Conduct security assessments on DoD cloud environments using the Risk Management Framework (RMF).
Assist in providing guidance on policies and procedures to ensure compliance within an accreditation boundary.
Implement security strategies to control and manage organizational information risks.
Assess information systems to determine risk exposure and develop documentation addressing system security requirements.
Enhance information security education within the organization and team.
Monitor the latest security technologies to ensure that project personnel remain in the know.