Information Systems Security Officer, Mid

Booz Allen Hamilton • Wright-Patterson AFB, OH

7d • $61,900 - $141,000

About The Position

As an information security risk specialist, the Information Systems Security Officer works with clients to identify cyber risks, understand applicable policies, and develop mitigation plans. The role gathers technical and personnel details from colleagues to assess the threat landscape and helps guide clients through action plans using presentations, whitepapers, and milestones. It translates security concepts so clients can make informed decisions to protect mission-critical systems, with opportunities to grow skills in cloud technologies.

Requirements

• At least 2 years of experience as an ISSO or Information System Security Analyst (ISSA).
• Experience conducting tool assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements.
• Experience implementing, overseeing, and maintaining system security configurations, practices, and procedures.
• Experience implementing controls from NIST 800-53, FedRAMP, ICD 503, RMF, and DoD Information Levels, including applying them to IT solution design and implementation to achieve an authorization to operate (ATO).
• Ability to perform risk analysis.
• Active TS/SCI clearance; applicants are subject to a security investigation and must meet eligibility requirements for access to classified information.
• High school diploma or GED.
• DoD 8570 IAM Level II certification, such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP.

Nice To Haves

• Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool.
• Experience assessing configuration changes, such as new COTS tools or web application upgrades, to the system security boundary.
• Experience with cyber-related tools such as Splunk or STIG Viewer.
• Experience with SAP.
• Knowledge of Zero Trust principles and concepts.
• Ability to work within a collaborative team and a fast-paced, dynamic environment.
• Excellent written, organizational, presentation, and verbal communication skills.
• AWS, Azure, or GCP certification.

Responsibilities

• Work with clients to discover cyber risks and understand applicable policies.
• Develop plans to mitigate identified risks.
• Gather technical and personnel details from colleagues to assess the threat landscape.
• Guide clients through action plans using presentations, whitepapers, and milestones.
• Translate security concepts to help clients make decisions about securing mission-critical systems.
• Implement, oversee, and maintain security configurations, practices, and procedures for systems.
• Assess tools and configurations against best practices, vendor specifications, and government security guidelines and requirements.
• Implement security controls and conduct risk analysis to support system authorization to operate (ATO).

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards program for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED