> Markdown version of [/jobs/ext/659042-information-security-risk-specialist](https://www.wearedevelopers.com/jobs/ext/659042-information-security-risk-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Risk Specialist

- **Company:** Booz Allen Hamilton Inc.
- **Location:** Scott Air Force Base, IL, United States
- **Salary:** $99,000.0 - $225,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Nmap, HP WebInspect, Cloud Platform System, Microsoft InTune, SC Clearance, Tenable Nessus, Devsecops
- **Published:** June 26, 2026
- **Apply:** https://www.clearancejobs.com/jobs/8997353/information-security-risk-specialist

## About the Role

* Experience implementing information assurance or cybersecurity processes and policies
 * Experience managing and administering Assured Compliance Assessment Solution (ACAS) and Host-Based Security System (HBSS)
 * Experience utilizing the Enterprise Mission Assurance Support Service (eMASS) to address security controls, create POA&Ms, and upload artifacts such as STIG checklists or ACAS scans
 * Knowledge of supporting system security and authorization processes across multiple platforms, environments, or impact levels
 * Knowledge of reviewing vulnerability documentation and writing Residual Risk statements
 * Knowledge of reporting IT security events or incidents based on policies and procedures
 * Secret clearance
 * HS diploma or GED

Nice If You Have:

 * Experience serving as an Information Systems Security Officer (ISSO)
 * Knowledge of Cloud-based infrastructure and DevSecOps principles and practices
 * Knowledge of security tools such as Microsoft Intune, Microsoft Defender, or other similar security tools
 * Ability to use and operate security tools, including Tenable Nessus, SecurityCenter, IBM Guardium, HP WebInspect, or Network Mapper
 * DoW 8140 Certification



## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)