Information Security Risk Specialist

Booz Allen Hamilton • Patuxent River,MD,US, MD

4h • $52,900 - $108,000 • Onsite

About The Position

The Information Security Risk Specialist supports military leaders in identifying cyber risks, understanding applicable policies, and developing mitigation plans. The role gathers technical and personnel details from subject matter experts and system engineers to assess the threat landscape, then helps guide clients through mitigation plans using presentations, white papers, and milestones. It translates security concepts into information that supports decisions about protecting critical infrastructure and mission-critical systems. The position offers an opportunity to build experience in strategic information security and cybersecurity risk management.

Requirements

• Experience supporting cybersecurity, information security, risk management, compliance, or incident response through an internship, fellowship, academic project, or extracurricular activity.
• Knowledge of cybersecurity principles, information security concepts, and risk management fundamentals.
• Ability to analyze technical and non-technical information, document findings, and communicate recommendations in writing and verbally.
• Ability to obtain a Secret clearance.
• Scheduled to obtain a bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, or Risk Management by Winter 2026.
• Ability to obtain a Security+ certification within six months of hire.

Nice To Haves

• Experience supporting cybersecurity assessments, vulnerability management, security operations, DevSecOps, incident response, or cyber defense exercises.
• Knowledge of the NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), CIS Controls, or other industry security frameworks.
• Ability to perform risk analysis, evaluate security controls, and support compliance documentation activities.
• Secret clearance.
• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Risk Management, or a related field.
• Cybersecurity certifications such as CompTIA Security+ or Red Hat Certification.

Responsibilities

• Help military leaders discover and understand cyber risks.
• Help clients understand applicable policies and develop plans to mitigate risk.
• Gather technical and personnel details from subject matter experts and system engineers to support threat-landscape assessments.
• Guide clients through plans of action using presentations, white papers, and milestones.
• Translate security concepts to support decisions about securing critical infrastructure and mission-critical systems.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level