DoD RMF Cloud Security Risk Specialist

Booz Allen Hamilton; Lexington (MA); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Security Risk Specialist to conduct RMF-based security assessments for DoD cloud environments and help ensure accreditation compliance across programs. The role emphasizes documenting system security requirements and implementing strategies to manage information risks.

The candidate will contribute to security education within the team, monitor evolving technologies, and support a robust control environment while working toward feasible compliance

Qualifications

• 3+ years in a cybersecurity role
• 2+ years with DoD RMF processes
• Experience with RMF, STIGs, NIST 800-53/800-37, AWS, Xacta, or eMASS
• Experience implementing and maintaining security controls
• Ability to document accreditation efforts
• Secret clearance
• Bachelor's degree in relevant fields
• DoD 8140 IAM Level 1 Certification

Responsibilities

• Conduct security assessments on DoD cloud environments using RMF
• Assist with policies to ensure accreditation compliance
• Implement security strategies to control information risks
• Assess systems and document system security requirements
• Enhance information security education within the team
• Monitor latest security technologies for project personnel

Skills

RMF accreditation

NIST 800-53/800-37

DoD 8140 IAM Level 1

Cloud security (AWS/Azure/GovCloud)

Container security (Kubernetes/Docker)

SIEM/SOAR (Splunk/OpenSearch/Elastic)

Documentation for accreditation

Education

Bachelor's degree in Cybersecurity/IT/CS/IS/Data Science/Software Engineering

DoD 8140 IAM Level 1 Certification

Tools

Xacta

eMASS

Jira

Confluence

Job description

Booz Allen Hamilton is seeking an Information Security Risk Specialist to conduct RMF-based security assessments for DoD cloud environments and help ensure accreditation compliance across programs. The role emphasizes documenting system security requirements and implementing strategies to manage information risks.

The candidate will contribute to security education within the team, monitor evolving technologies, and support a robust control environment while working toward feasible compliance