Information System Security Officer

Booz Allen Hamilton • Washington, DC

2d • $62,000 - $141,000

About The Position

The Information System Security Officer (ISSO) assesses and requests customer authorization for company-managed classified endpoints, servers, networks, and security appliances, applying evolving U.S. government cybersecurity policy and guidance. The ISSO ensures that auditing, virus scanning, and hardware and software configuration management are performed in accordance with customer-approved system assessment documentation and policy. The role monitors program system administrators to verify that relevant security procedures are followed and documents compliance criteria and test cases for validating systems against evolving cybersecurity requirements and guidance from NIST, the Intelligence Community, and the DoD.

Requirements

• Experience applying security systems concepts, requirements, design development, implementation, and integration to information systems.
• Knowledge of the Risk Management Framework (RMF) and system assessment and authorization using a Governance, Risk, and Compliance (GRC) tool.
• Knowledge of risk mitigation and selecting and designing security controls for implementation.
• Knowledge of incident response and data loss prevention, detection, and response.
• Knowledge of NIST and Federal Information Security Management Act (FISMA) requirements for monitoring and reporting.
• TS/SCI clearance with a polygraph.
• High school diploma or GED.
• DoD 8570 IAM Level II Certification.

Nice To Haves

• Experience executing the analysis, design, and implementation of enterprise cybersecurity solutions.
• Experience maintaining vulnerability scanning tool compliance and patch management, including ensuring IT staff deploy patches to all systems, maintaining compliance with directives, managing system changes, and assessing the security impact of changes.
• Experience engineering and implementing security-based solutions to automate and improve the security posture of systems and supporting infrastructure.
• Excellent written and verbal communication skills.
• CISSP-ISSAP or CISSP-ISSEP Certification.

Responsibilities

• Assess company-managed classified endpoints, servers, networks, and security appliances and request customer authorization for them.
• Apply evolving U.S. government cybersecurity policy and guidance.
• Ensure system, network, and security appliance auditing, virus scanning, and hardware and software configuration management requirements are executed according to customer-approved assessment documentation and policy.
• Monitor program system administrators to ensure relevant security procedures are followed.
• Document compliance criteria and test cases to validate compliance with evolving cybersecurity requirements and guidance from NIST, the Intelligence Community, and the DoD.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values. Eligible full-time and part-time employees working at least 20 hours per week on a regular basis may participate in benefit programs; employees below that threshold are eligible only for select offerings, excluding health benefits.

What This Job Offers

• Job Type: Full-time
• Education Level: High school or GED