Information Systems Security Officer, Mid

Booz Allen Hamilton•Wright-Patterson AFB, OH

6d•$61,900 - $141,000•Onsite

About The Position

Booz Allen is hiring an Information Systems Security Officer to help clients identify cybersecurity risks, interpret applicable policies, and develop mitigation plans. The role involves gathering technical and personnel details from colleagues to assess the threat landscape, then guiding clients through plans of action using presentations, whitepapers, and milestones. The ISSO translates security concepts to help clients make informed decisions about protecting mission-critical systems and has an opportunity to grow skills in cloud technologies. The position supports the protection of critical national information systems and is located at Wright Patterson AFB, Ohio. Remote work is not available.

Requirements

At least 2 years of experience as an ISSO or Information System Security Analyst (ISSA).
Experience conducting tool assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements.
Experience implementing, overseeing, and maintaining system security configurations, practices, and procedures.
Experience implementing controls from NIST 800-53, FedRAMP, ICD 503, RMF, and DoD Information Levels, including applying them to IT solution design and implementation to achieve an ATO.
Ability to perform risk analysis.
Active TS/SCI clearance or eligibility to meet access requirements for classified information; TS/SCI clearance is required.
High school diploma or GED.
DoD 8570 IAM Level II certification, such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP.

Nice To Haves

Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool.
Experience assessing configuration changes, such as new COTS tools or web application upgrades, to the system security boundary.
Experience with cyber-related tools such as Splunk or STIG Viewer.
Experience with SAP.
Knowledge of Zero Trust principles and concepts.
Ability to work within a collaborative team and a fast-paced, dynamic environment.
Excellent written, organizational, presentation, and verbal communication skills.
AWS, Azure, or GCP certification.

Responsibilities

Work with clients to discover cyber risks, understand applicable policies, and develop mitigation plans.
Gather technical and personnel details from colleagues to assess the threat landscape.
Guide clients through plans of action using presentations, whitepapers, and milestones.
Translate security concepts for clients so they can make informed decisions about securing mission-critical systems.
Conduct tool assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements.
Implement, oversee, and maintain system security configurations, practices, and procedures.
Implement security controls and apply them to IT solution design and implementation to achieve an authorization to operate (ATO).
Perform risk analysis.