Cyber Risk & RMF Strategist

Booz Allen Hamilton; Lexington Park (MD); Hybrid; USD 99,000 - 225,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Disability coverage

Retirement benefits

Paid leave

Tuition assistance

Professional development

Work-life programs

Dependent care

Job summary

Booz Allen Hamilton is seeking an Information Security Risk Specialist to help DoD programs identify cyber risks, understand RMF requirements, and develop mitigation plans. You will collect inputs from SMEs and engineers, translate risk concepts into actionable steps, and present milestones to clients.

The role offers opportunities to expand expertise in RMF, eMASS, STIGs, and security controls while supporting mission-critical systems and national security infrastructure.

Qualifications

• 3+ years of experience with eMASS
• Ability to build vendor and sponsor relationships
• Ability to identify security requirements for connected and non-connected systems and NSS
• Secret clearance
• Bachelor's degree
• CISSP, CISM, or CCSP Certification preferred

Responsibilities

• Identify cyber risks for DoD programs and develop mitigation plans
• Review technical, environmental, and personnel details to assess threat landscape
• Guide clients through action plans with presentations, white papers, and milestones
• Translate security concepts for decision making to protect mission-critical systems and infrastructure

Skills

eMASS experience

security risk analysis

RMF knowledge

vendor/sponsor relationships

Secret clearance

Education

Bachelor's degree

Master's degree

Tools

eMASS

eMASSter

STIG

SCAP

ACAS

HBSS

Microsoft Office (Word/Excel/PowerPoint/Visio)

Job description

Booz Allen Hamilton is seeking an Information Security Risk Specialist to help DoD programs identify cyber risks, understand RMF requirements, and develop mitigation plans. You will collect inputs from SMEs and engineers, translate risk concepts into actionable steps, and present milestones to clients.

The role offers opportunities to expand expertise in RMF, eMASS, STIGs, and security controls while supporting mission-critical systems and national security infrastructure.