Information Systems Security Officer, Mid

Booz Allen Hamilton•Beavercreek, OH

9d•Remote

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to our clients. In all of this “cyber noise,” how can organizations understand their risks and how to mitigate them? This role requires an information security risk specialist to help break down complex threats into manageable plans of action. As an information security risk specialist on our team, you’ll work with clients to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll get technical and personnel details from colleagues to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical systems. This is an opportunity to take an active role in information security while growing skills in cloud technologies. Be a part of a team that protects our nation's critical information systems.

Requirements

2+ years of experience as an ISSO or Information System Security Analyst (ISSA).
Active TS/SCI clearance; willingness to take a polygraph exam.
HS diploma or GED.
DoD 8570 Certification such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP Certification.

Nice To Haves

Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool.
Experience with cyber- related tools, such as Splunk or STIG Viewer.
Experience with SAP.
Knowledge of Zero Trust principles and concepts.
Possession of excellent written, organizational, presentation, and verbal communication skills.
AWS, Azure, or GCP Certification.

Responsibilities

Work with clients to discover their cyber risks, understand applicable policies, and develop a mitigation plan.
Get technical and personnel details from colleagues to assess the entire threat landscape.
Guide your client through a plan of action with presentations, whitepapers, and milestones.
Translate security concepts for your client so they can make the best decisions to secure their mission-critical systems.
Implement controls from NIST 800-53, FedRAMP, ICD 503, RMF, or DoD Information Levels, including applying them to the design and implementation of information technology solutions to achieve an authorization to operate (ATO).
Perform risk analysis.
Conduct tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements.
Implement, oversee, and maintain the security configuration, practices, and procedures for systems.
Assess configuration changes, such as new COTS tools or web application upgrades, to system security boundary.
Work within a collaborative team and a fast-paced and dynamic environment.