Information System Security Officer

Are you looking for an opportunity to share your experience in system security engineering to help our country and assist our clients with missions?

You’ll ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration. You will coordinate changes or modifications with the appropriate Information System Security Manager (ISSM) and implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation. You’ll perform the documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Test (IATT) and Authority to Operate (ATO).

You will support DoD and military clients in developing cutting-edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies. Assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective. Works with minimal supervision within established procedures and practices.

With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect critical AI and ML networks for vital client missions and operations.

Do you have experience in Vuls?, Do you have a Associate’s degree?, * 3+ years of experience with guiding a client through the entire Risk Management Framework (RMF) and Authority to Operate (ATO) process

• Experience working as an Information System Security Officer (ISSO), or a role in Information Technology or IT Service Management
• Experience in reviewing enterprise and code vulnerability scan reports using security tools such as Fortify and ACAS, annotating the risk remediation efforts, and conducting security control assessments to ensure security principles are applied and compliance is met with DoD directives, and Security Technical Implementation Guides (STIGs)
• Knowledge of the DoD Risk Management Framework (RMF), NIST 800-series Security Control Documentation, Body of Evidence requirements, and Interim Authority to Test (IATT)
• Knowledge of information security and it’s implications on cyber security activities in averting IT threats, attacks, or vulnerabilities
• Knowledge of the U.S. military and DoD IT environments
• Ability to perform a root cause analysis review and document results using a Plan of Action and Milestone (POA&M) format
• TS/SCI clearance
• Associate’s degree and 7+ years of experience in cybersecurity, Bachelor’s degree and 3+ years of experience in cybersecurity, or 9+ years of experience in cybersecurity in lieu of a degree
• DoD 8140 IAT Level II Certification

Nice If You Have:

• Experience with applying abstract security requirements
• Experience in advising environment and communicating technical subjects to clients
• Experience with System Information and Event Management (SIEM) tools such as Elastic, Kibana, or related
• Experience with eMASS or XACTA
• Knowledge of Vulnerability Management, Configuration Management, Data Management, and Agile processes
• Knowledge of enterprise environments and cloud architecture
• Ability to clearly express processes and procedures and collaborate with other teams to determine gaps
• Possession of excellent verbal and written communication skills
• DoD 8140 IAT Level III Certification

Pulled from the full job description

• Tuition reimbursement
• Health insurance
• Retirement plan
• Flexible spending account, At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.