DoD Information Security Risk Strategist

Talentify; McLean (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Security Risk Specialist to collaborate with DoD system owners, engineers, and SMEs to identify cyber risks and develop actionable mitigation plans. You will present remediation strategies and milestones to ensure robust risk management and cybersecurity resilience in DoD environments.

You will translate security concepts for clients, guiding decisions to secure critical systems and expand your expertise in DevSecOps and cloud security while working

Qualifications

• 5+ years of experience working in a professional IT environment
• 3+ years of experience in cybersecurity and Assessment and Authorization (A&A) supporting DoD environments
• Experience supporting federal government or DoD ATO packages, performing A&A and RMF, and conducting risk assessments for federal government or DoD systems hosted in AWS, Azure, or hybrid cloud environments
• Experience performing technical evaluations and security control assessments in cloud-native and containerized environments
• Experience interfacing with engineering teams to align DevSecOps pipelines with cybersecurity policies
• Knowledge of compliance testing tools such as ACAS, SCAP, STIGs or SRGs, eMASS, or Xacta
• Experience with NIST SP 800-53, CNSSI 1253, artifact generation, SSPs, POA&Ms, SAPs, risk assessments, and continuous monitoring
• TS/SCI clearance
• HS diploma or GED
• DoD 8570 Level II Security+ Certification or higher

Responsibilities

• Collaborate with contractors and DoD system owners to identify cyber risks and develop mitigation strategies
• Guide clients through actionable remediation plans and deliver presentations, white papers, and milestones to ensure effective risk management and cybersecurity resilience
• Translate security concepts for clients to support decision-making and secure critical DoD systems
• Support DevSecOps, cloud security, and platform hardening discussions with SMEs and engineers

Skills

InfoSec risk mgmt

DevSecOps knowledge

Cloud security

DoD RMF A&A

NIST SP 800-53

Threat modeling

Documentation skills

Education

Bachelor's degree

Tools

ACAS

SCAP

STIGs

eMASS

Xacta

AWS

Azure

Kubernetes

CNSSI 1253

POA&M

Job description

Booz Allen Hamilton is seeking an Information Security Risk Specialist to collaborate with DoD system owners, engineers, and SMEs to identify cyber risks and develop actionable mitigation plans. You will present remediation strategies and milestones to ensure robust risk management and cybersecurity resilience in DoD environments.

You will translate security concepts for clients, guiding decisions to secure critical systems and expand your expertise in DevSecOps and cloud security while working