Cyber Risk Strategist — DoD RMF/ATO Expert

Booz Allen; Maryland; Presencial; USD 62.000 - 141.000; Jornada completa

Descripción de la vacante

Booz Allen is seeking an Information Security Risk Specialist to help DoD clients understand and mitigate cyber risks. You will gather technical and personnel details, identify threats, and develop actionable mitigation plans. You’ll present findings through reports and briefings to military leadership.

The role demands RMF artifact creation, SAP/SAR development, and a strong compliance mindset. A Secret clearance is required, with DoD RMF experience highly valued.

Formación

• Experience supporting DoD system authorization and Authorization to Operate (ATO) activities.
• Experience analyzing and prioritizing vulnerability scan results, maintaining hardware/software inventories, tracking vulnerabilities, and supporting remediation.
• Experience developing and supporting SAPs, SARs, RMF artifacts, control assessments, and authorization packages per DoD RMF.
• Knowledge of Ports, Protocols, and Services Management (PPSM).
• Ability to work in a structured, compliance-driven environment with minimal supervision.
• Requires Secret clearance.

Responsabilidades

• Assist military leaders by identifying cyber risks and helping draft mitigation plans.
• Gather technical and personnel details from SMEs to support risk assessments.
• Develop and present Plans of Action and Milestones (POA&M) and RMF artifacts.
• Translate security concepts for informed decision-making to secure critical systems.

Conocimientos

DoD authorization

ATO activities

Vulnerability management

Security Assessment Plans (SAPs)

Security Assessment Reports (SARs)

RMF artifacts

PPSM

STIGs knowledge

Educación

Bachelor’s degree in Cybersecurity/IT/CS/IS/Data Science or Software Engineering

Master’s degree (nice to have)

Herramientas

eMASS

ACAS

STIG Viewer

DoD 8140/752- Cyber Policy and Strategy

Descripción del empleo

Booz Allen is seeking an Information Security Risk Specialist to help DoD clients understand and mitigate cyber risks. You will gather technical and personnel details, identify threats, and develop actionable mitigation plans. You’ll present findings through reports and briefings to military leadership.

The role demands RMF artifact creation, SAP/SAR development, and a strong compliance mindset. A Secret clearance is required, with DoD RMF experience highly valued.