Information Systems Security Officer, Mid

Booz Allen Hamilton•Beavercreek, OH

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to our clients. In all of this “cyber noise,” how can organizations understand their risks and how to mitigate them? This role requires an information security risk specialist to help break down complex threats into manageable plans of action. The information security risk specialist will work with clients to discover their cyber risks, understand applicable policies, and develop a mitigation plan. This involves gathering technical and personnel details from colleagues to assess the entire threat landscape. The specialist will then help guide the client through a plan of action with presentations, whitepapers, and milestones, translating security concepts for the client so they can make the best decisions to secure their mission-critical systems. This is an opportunity to take an active role in information security while growing skills in cloud technologies and protecting critical information systems.

Requirements

2+ years of experience in cybersecurity
Experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements
Experience with the implementation, oversight, and maintenance of the security configuration, practices, and procedures for systems
Experience implementing controls from NIST 800-53, RMF, and DoD Information Levels, including applying them to the design and implementation of information technology solutions to achieve an authorization to operate (ATO)
Ability to perform risk analysis
Active TS/SCI clearance; willingness to take a polygraph exam
HS diploma or GED
DoD 8570 IAM Level II Certification such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP Certification

Nice To Haves

Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool
Experience assessing configuration changes, such as new COTS tools or web application upgrades, to system security boundary
Experience with cyber tools, such as Splunk
Experience with SAP
Knowledge of Zero Trust principles and concepts
Possession of excellent written, organizational, presentation, and verbal communication skills
AWS, Azure, or GCP Certification

Responsibilities

Discover client cyber risks
Understand applicable policies
Develop a mitigation plan
Assess the entire threat landscape
Guide the client through a plan of action with presentations, whitepapers, and milestones
Translate security concepts for the client
Implement, oversee, and maintain the security configuration, practices, and procedures for systems
Implement controls from NIST 800-53, RMF, and DoD Information Levels, including applying them to the design and implementation of information technology solutions to achieve an authorization to operate (ATO)
Perform risk analysis
Assess configuration changes, such as new COTS tools or web application upgrades, to system security boundary
Work within a collaborative team and a fast-paced and dynamic environment