Information System Security Officer

Booz Allen Hamilton•Washington, DC

1d•$62,000 - $141,000•Onsite

About The Position

The Information System Security Officer (ISSO) assesses and requests customer authorization for company-managed classified endpoints, servers, networks, and security appliances, applying evolving U.S. government cybersecurity policy and guidance. The ISSO ensures that system, network, and security appliance auditing, virus scanning, and hardware and software configuration management are performed according to customer-approved system assessment documentation and policy. The role monitors program system administrators to ensure they follow applicable security procedures. It also documents compliance criteria and test cases to validate adherence to changing cybersecurity requirements and guidance from NIST, the Intelligence Community, and the Department of Defense.

Requirements

Experience applying security systems concepts, requirements, design development, implementation, and integration to information systems.
Knowledge of the Risk Management Framework (RMF) and performing system assessment and authorization through a Governance, Risk, and Compliance (GRC) tool.
Knowledge of risk mitigation and selecting and designing security controls for implementation.
Knowledge of incident response and data loss prevention, detection, and response.
Knowledge of NIST and Federal Information Security Management Act (FISMA) requirements for monitoring and reporting.
TS/SCI clearance with a polygraph.
High school diploma or GED.
DoD 8570 IAM Level II Certification.

Nice To Haves

Experience executing the analysis, design, and implementation of enterprise cybersecurity solutions.
Experience maintaining vulnerability scanning tool compliance and patch management, including ensuring IT staff pushes patches to all systems, maintaining compliance with directives, managing system changes, and assessing their security impact.
Experience engineering and implementing security-based solutions to automate and improve the security posture of systems and supporting infrastructure.
Excellent written and verbal communication skills.
CISSP-ISSAP or CISSP-ISSEP Certification.

Responsibilities

Assess and request customer authorization for company-managed classified endpoints, servers, networks, and security appliances.
Apply evolving U.S. government cybersecurity policy and guidance.
Ensure auditing, virus scanning, and hardware and software configuration management are conducted according to customer-approved system assessment documentation and policy.
Monitor program system administrators to ensure security procedures are followed.
Document compliance criteria and test cases to validate compliance with evolving cybersecurity requirements and guidance from NIST, the Intelligence Community, and the DoD.