Information System Security Officer

Booz Allen Hamilton•Quantico, VA

3d•$62,000 - $141,000•Remote

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to a varied government IT ecosystem. In all of this “cyber noise”, how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action. As an Information System Security Officer on our team, you’ll work with our federal clients to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from our clients and SMEs to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity and risk mitigation. Work with us as we protect our client's cyber infrastructure. Join us. The world can’t wait.

Requirements

Experience supporting the development of security plans or packages for Assessment and Authorization (A&A) of IT systems Authority to Operate (ATO), including the implementation and assessment of cybersecurity controls
Ability to accurately relate requirements and document requirements within the appropriate security document or within the RMF system, and coordinate with the program, other systems, and security personnel
Ability to create tactics, techniques, procedures, whitepapers, standard operating procedures, workflows, system data flows, and architectural diagrams
Ability to analyze RMF policies
Top Secret clearance
HS diploma or GED and 9+ years of experience with information assurance or cybersecurity, or Bachelor's degree in Information Systems Technology, CS, or Computer Engineering and 5+ years of experience with information assurance or cybersecurity

Nice To Haves

Experience with Xacta or JCAM
Experience reviewing NESSUS or ACAS vulnerability scans and reviewing audit logs, including Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Alerts (IAVA)
Experience providing network or system administration or computer operations
Experience with Windows and Linux systems
Experience supporting the Intelligence Community
Knowledge of cloud architecture and virtualization
Possession of excellent interpersonal and presentation skills
Possession of excellent verbal and written communication skills
TS/SCI clearance with a polygraph
CISSP, CISM, CAP, or CASP+ Certification

Responsibilities

Work with federal clients to discover their cyber risks, understand policies, and develop a mitigation plan.
Gather technical, environmental, and personnel details from clients and SMEs to assess the entire threat landscape.
Guide clients through a plan of action with presentations, whitepapers, and milestones.
Translate security concepts for clients so they can make the best decisions to secure their mission-critical systems.