Information System Security Officer

Booz Allen Hamilton•Warner Robins, GA

2d•$61,900 - $141,000

About The Position

The Information System Security Officer (ISSO) will ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration. This role involves coordinating changes or modifications with the Information System Security Manager (ISSM) and implementing and enforcing all DoD cybersecurity policies and procedures. The ISSO will perform documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Test (IATT) and Authority to Operate (ATO). The position supports DoD and military clients in developing cutting-edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies. The ISSO will assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective, working with minimal supervision within established procedures and practices. The role offers opportunities for mentoring, challenging hands-on problem-solving, and learning new tools and skills, with a focus on growing as a team to create optimal solutions for customers, specifically in securing and protecting critical AI and ML networks for vital client missions and operations.

Requirements

3+ years of experience with guiding a client through the entire Risk Management Framework (RMF) and Authority to Operate (ATO) process
Experience with working as an Information System Security Officer (ISSO), or a role in Information Technology or IT Service Management
Knowledge of the DoD Risk Management Framework (RMF), NIST 800-series Security Control Documentation, Body of Evidence requirements, and Interim Authority to Test (IATT)
Knowledge of information security and its implications on cyber security activities in averting IT threats, attacks, or vulnerabilities
Knowledge of the U.S. military and DoD IT environments
TS/SCI clearance
Associate's degree and 7+ years of experience in cybersecurity, Bachelor’s degree and 3+ years of experience in cybersecurity, or 9+ years of experience in cybersecurity in lieu of a degree
DoD 8140 IAT Level II Certification

Nice To Haves

Experience with applying abstract security requirements
Experience in advising environment and communicating technical subjects to clients
Experience with System Information and Event Management (SIEM) tools such as Elastic, Kibana, or related
Experience with eMASS or XACTA
Knowledge of Vulnerability Management, Configuration Management, Data Management, and Agile processes
Knowledge of enterprise environments and cloud architecture
Ability to clearly express processes and procedures and collaborate with other teams to determine gaps
Possession of excellent verbal and written communication skills
DoD 8140 IAT Level III Certification

Responsibilities

Ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration.
Coordinate changes or modifications with the appropriate Information System Security Manager (ISSM).
Implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation.
Perform documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Test (IATT) and Authority to Operate (ATO).
Support DoD and military clients in developing cutting-edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies.
Assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective.
Perform a root cause analysis review and document results using a Plan of Action and Milestone (POA&M) format.