Information Security Risk Specialist

Booz Allen Hamilton•Arlington, VA

1d•$62,000 - $141,000•Remote

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—an information security risk specialist who will break down complex threats into manageable plans of action. As an Information Security Risk Specialist on our team, you’ll use your experience to discover cyber risks, understand applicable policies, and develop a mitigation plan. You’ll review technical and personnel details to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts so they can make the best decisions to secure their systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in cloud computing. Work with us as we protect our nation's infrastructure. Join us. The world can’t wait.

Requirements

5+ years of experience in a cybersecurity role working DoD RMF accreditation efforts for cloud environments in AWS or Azure
5+ years of experience implementing technical requirements using guidance stemming from STIG checklists and NIST SP 800 series
5+ years of experience developing artifacts, including technical documentation, to form an ATO’s body of evidence
Knowledge of eMASS or XACTA, Splunk, Nessus, and Trellix ESS
Ability to perform systems administration in Windows or Linux, including basic troubleshooting, installation, configuration, monitoring system performance or availability, and conducting security upgrades
Ability to architect, implement, integrate, and manage COTS solutions for cloud environments
Secret clearance
Bachelor's degree
DoD 8140 IAM Certification such as Security+ or CISSP Certification

Nice To Haves

Experience with programming and debugging, shell scripting, application containerization, data storage, and retrieval from a variety of sources
Knowledge of scripting languages for automation and troubleshooting and APIs with their usage for data integration
Top Secret clearance
DoD ESS 201/301 and ACAS Certifications
Cloud Certifications such as CGRC, AWS CCP, or AWS Security Certification

Responsibilities

Discover cyber risks
Understand applicable policies
Develop a mitigation plan
Review technical and personnel details to assess the entire threat landscape
Guide your client through a plan of action with presentations, white papers, and milestones
Translate security concepts so they can make the best decisions to secure their systems
Act as an information security subject matter expert
Broaden skills in cloud computing