DoD Cyber Risk Specialist — RMF/A&A, DevSecOps

Booz Allen Hamilton; Fort Belvoir (VA); On-site; USD 99,000 - 225,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Disability coverage

Retirement benefits

Paid leave

Professional development

Tuition assistance

Work-life programs

Dependent care

Job summary

Booz Allen Hamilton is seeking an Information Security Risk Specialist to collaborate with DoD system owners, engineers, and developers to identify cyber risks and craft remediation strategies. You will assess infrastructure and personnel dynamics to map the full threat landscape and translate security concepts for executive decisions.

You will work with SMEs to produce actionable plans, white papers, and milestones, expanding your DevSecOps and cloud security expertise within a client-focused

Qualifications

• 5+ years of experience in a professional IT environment.
• 3+ years in cybersecurity and A&A supporting DoD environments.
• Experience with ATO packages, RMF, and risk assessments for DoD systems hosted in AWS/Azure/hybrid cloud environments.
• Experience performing security control assessments in cloud-native and containerized environments.
• Experience interfacing with engineering teams to align DevSecOps with cybersecurity policies.
• Knowledge of NIST SP 800-53, CNSSI 1253, SSPs, POA&Ms, SAPs, risk assessments, and continuous monitoring.
• HS diploma or GED, DoD 8570 Level II Security+ Certification.

Responsibilities

• Collaborate with DoD system owners, SMEs, and engineers to identify cyber risks.
• Evaluate technical infrastructure and personnel dynamics to assess threat landscape.
• Develop remediation plans and guide clients with actionable milestones and white papers.
• Deliver clear security recommendations via presentations and documentation.
• Translate security concepts for client decisions to secure DoD systems.
• Support DevSecOps and cloud security initiatives.

Skills

Cybersecurity

A&A for DoD

Risk assessment

RMF

NIST SP 800-53

Cloud security

Education

DoD 8570 Security+ Certification

Tools

ACAS

SCAP

STIGs

eMASS/Xacta

Job description

Booz Allen Hamilton is seeking an Information Security Risk Specialist to collaborate with DoD system owners, engineers, and developers to identify cyber risks and craft remediation strategies. You will assess infrastructure and personnel dynamics to map the full threat landscape and translate security concepts for executive decisions.

You will work with SMEs to produce actionable plans, white papers, and milestones, expanding your DevSecOps and cloud security expertise within a client-focused