Apply on Employer Site

Booz Allen Hamilton · 8 hours ago

Information Systems Security Officer

Fort Meade, MD

Full-time

Hybrid

Senior Level

$78K/yr - $176K/yr

5+ years exp

Booz Allen Hamilton is seeking an Information Systems Security Officer to join a team of communications and systems engineers. The role involves performing risk assessments, developing security documentation, and implementing cyber security controls while communicating security complexities to various stakeholders.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Perform ongoing system analysis activities for programs

Perform risk assessments of systems and equipment, assist engineers with identifying solutions for vulnerabilities, create and map Security Technical Implementation Guides (STIGs), submit change requests for system components, develop a Plan of Action and Milestones (POA&M), create documentation supporting Risk Management Framework (RMF) accreditations, perform vulnerability management using automated systems, and create and submit RMF packages

Brief the technical security posture to client leadership, prepare brief slides and summaries of vulnerabilities, and advise on how to prevent and mitigate future security threats

Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management

Implement infrastructure and cyber security controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises

Perform risk and vulnerability assessments in network, system, and application areas

Leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise

Qualification

Information assuranceCybersecurityRisk Management FrameworkVulnerability managementAssured Compliance Assessment SolutionHost-Based Security SystemEnterprise Mission Assurance Support ServiceMicrosoft Defender for EndpointCloud-based infrastructureDevSecOps principlesTenable NessusIBM GuardiumHP WebInspectNetwork Mapper

Required

5+ years of experience with information assurance or cybersecurity

Experience serving as an Information Systems Security Officer (ISSO)

Experience managing and administering Assured Compliance Assessment Solution (ACAS) and Host-Based Security System (HBSS)

Experience utilizing the Enterprise Mission Assurance Support Service (eMASS) to address security controls, create POA&Ms, and upload artifacts, such as STIG checklists or ACAS scans

Experience with supporting system security and authorization processes

Experience reviewing vulnerability documentation and writing Residual Risk statements

Experience in reporting IT security events or incidents based on policies and procedures

Knowledge of Microsoft Defender for Endpoint (MDE)

Secret clearance

Bachelor's degree