Information System Security Officer

Booz Allen Hamilton•Warner Robins, GA

2d•Remote

About The Position

Information System Security Officer The Opportunity: Are you looking for an opportunity to share your experience in system security engineering to help our country and assist our clients with missions? You'll ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration. You will coordinate changes or modifications with the appropriate Information System Security Manager (ISSM) and implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation. You'll perform the documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Test (IATT) and Authority to Operate (ATO). You will support DoD and military clients in developing cutting-edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies. Assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective. Works with minimal supervision within established procedures and practices. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect critical AI and ML networks for vital client missions and operations. Join us. The world can’t wait.

Requirements

3+ years of experience with guiding a client through the entire Risk Management Framework (RMF) and Authority to Operate (ATO) process
Experience working as an Information System Security Officer (ISSO), or a role in Information Technology or IT Service Management
Experience in reviewing enterprise and code vulnerability scan reports using security tools such as Fortify and ACAS, annotating the risk remediation efforts, and conducting security control assessments to ensure security principles are applied and compliance is met with DoD directives, and Security Technical Implementation Guides (STIGs)
Knowledge of the DoD Risk Management Framework (RMF), NIST 800-series Security Control Documentation, Body of Evidence requirements, and Interim Authority to Test (IATT)
Knowledge of information security and it’s implications on cyber security activities in averting IT threats, attacks, or vulnerabilities
Knowledge of the U.S. military and DoD IT environments
TS/SCI clearance
Associate's degree and 7+ years of experience in cybersecurity, Bachelor’s degree and 3+ years of experience in cybersecurity, or 9+ years of experience in cybersecurity in lieu of a degree
DoD 8140 IAT Level II Certification

Nice To Haves

Experience with applying abstract security requirements
Experience in advising environment and communicating technical subjects to clients
Experience with System Information and Event Management (SIEM) tools such as Elastic, Kibana, or related
Experience with eMASS or XACTA
Knowledge of Vulnerability Management, Configuration Management, Data Management, and Agile processes
Knowledge of enterprise environments and cloud architecture
Ability to clearly express processes and procedures and collaborate with other teams to determine gaps
Possession of excellent verbal and written communication skills
DoD 8140 IAT Level III Certification

Responsibilities

Ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration.
Coordinate changes or modifications with the appropriate Information System Security Manager (ISSM).
Implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation.
Perform the documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Test (IATT) and Authority to Operate (ATO).
Support DoD and military clients in developing cutting-edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies.
Assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective.
Perform a root cause analysis review and document results using a Plan of Action and Milestone (POA&M) format.