DoD Information Security Risk & RMF Specialist

Booz Allen Hamilton; North Dakota; On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton in the United States seeks an Information Security Risk Specialist to collaborate with DoD system owners, engineers, and contractors to identify cyber risks, assess controls, and develop mitigation strategies. You will translate security concepts into actionable plans and deliverables across presentations, white papers, and milestones.

You will guide clients through RMF/AA processes, support cloud security in AWS/Azure/hybrid environments, and work with DevSecOps teams to

Qualifications

• 5+ years in IT in a professional environment.
• 3+ years in cybersecurity and A&A for DoD environments.
• Experience with DoD ATO packages, RMF, and risk assessments for DoD systems hosted in AWS/Azure/hybrid environments.
• Experience with cloud-native and containerized environments.
• Interfacing with engineering teams to align DevSecOps with cybersecurity policies.
• Knowledge of compliance testing tools such as ACAS, SCAP, STIGs, SRGs, eMASS, or Xacta.
• Experience with NIST SP 800-53, CNSSI 1253, SSPs, POA&Ms, SAPs, risk assessments, and continuous monitoring.
• TS/SCI clearance.
• HS diploma or GED.
• Nice to have: DevSecOps, CI/CD, Linux/Windows, Kubernetes.
• Bachelor's degree in IT or Cybersecurity.

Responsibilities

• Identify cyber risks and analyze applicable policies.
• Develop comprehensive mitigation strategies and remediation plans.
• Deliver results through presentations, white papers, and milestones for risk management and cybersecurity resilience.
• Translate security concepts for DoD system owners and stakeholders.
• Collaborate with SMEs and engineers to evaluate technical infrastructure and personnel dynamics.
• Guide clients through RMF/AA processes and cloud security strategy.
• Align DevSecOps pipelines with cybersecurity policies.
• Interface with engineering teams to ensure policy compliance in cloud environments.

Skills

Cybersecurity

A&A experience

DoD systems

Cloud security

DevSecOps

RMF

NIST 800-53

STIGs

TS/SCI

Security+

AWS/Azure

Education

HS diploma or GED

Tools

ACAS

SCAP

STIGs

eMASS

Xacta

CNSSI 1253

Job description

Booz Allen Hamilton in the United States seeks an Information Security Risk Specialist to collaborate with DoD system owners, engineers, and contractors to identify cyber risks, assess controls, and develop mitigation strategies. You will translate security concepts into actionable plans and deliverables across presentations, white papers, and milestones.

You will guide clients through RMF/AA processes, support cloud security in AWS/Azure/hybrid environments, and work with DevSecOps teams to