Information Systems Security Officer, Mid

Booz Allen Hamilton • Usa, OH

6d

About The Position

As an Information Systems Security Officer, Mid, you will help clients understand cybersecurity risks and develop practical mitigation plans. You will work with clients and colleagues to assess technical and personnel aspects of the threat landscape, understand applicable policies, and guide clients through plans of action using presentations, whitepapers, and milestones. You will translate security concepts so clients can make informed decisions to protect mission-critical systems, while developing your skills in cloud technologies and helping protect the nation’s critical information systems.

Requirements

• At least 2 years of experience as an ISSO or Information System Security Analyst (ISSA).
• Experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements.
• Experience implementing, overseeing, and maintaining security configurations, practices, and procedures for systems.
• Experience implementing controls from NIST 800-53, FedRAMP, ICD 503, RMF, and DoD Information Levels, including applying them to IT solution design and implementation to achieve an authorization to operate (ATO).
• Ability to perform risk analysis.
• Active TS/SCI clearance; applicants are subject to a security investigation and may need to meet eligibility requirements for access to classified information.
• High school diploma or GED.
• DoD 8570 IAM Level II certification, such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP.

Nice To Haves

• Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool.
• Experience assessing the security impact of configuration changes, such as new COTS tools or web application upgrades, on a system security boundary.
• Experience with cyber-related tools such as Splunk or STIG Viewer.
• Experience with SAP.
• Knowledge of Zero Trust principles and concepts.
• Ability to work within a collaborative team and a fast-paced, dynamic environment.
• Excellent written, organizational, presentation, and verbal communication skills.
• AWS, Azure, or GCP certification.

Responsibilities

• Assess clients’ cybersecurity risks and applicable security policies.
• Develop risk mitigation plans with clients and colleagues.
• Gather technical and personnel details to assess the threat landscape.
• Guide clients through plans of action using presentations, whitepapers, and milestones.
• Translate security concepts to help clients make decisions about protecting mission-critical systems.
• Conduct tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements.
• Implement, oversee, and maintain system security configurations, practices, and procedures.
• Implement applicable security controls and perform risk analysis to support authorization to operate (ATO).

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED