Information Security Risk Specialist — DoD RMF Expert

Booz Allen Hamilton; Honolulu (HI); Hybrid; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton seeks an Information Security Risk Specialist to work with DoD/IC clients, translating complex cyber risks into actionable mitigation plans. You will review policies, assess the threat landscape, and develop documents and milestones for risk reduction.

The role focuses on governance, risk management, and compliance, with opportunities to expand expertise across RMF, ATO processes, and security tooling in a mission-driven environment.

Qualifications

• 3+ years supporting RMF authorization activities on DoD/IC info systems.
• Experience with continuous monitoring tooling (ACAS, Nessus, SCAP or STIG Viewer).
• Knowledge of FIPS 199 and NIST SP 800-60, CNSSI 1253 impact level determinations.

Responsibilities

• Identify cyber risks with DoD/IC leaders and translate to mitigation plans.
• Develop assessment-ready documentation and presentations for AO/SCA reviews.
• Guide clients through action plans with milestones and white papers.

Skills

RMF authorization

Vulnerability remediation

Security governance

Policy interpretation

AO/SCA documentation

Education

HS diploma or GED

Bachelor's degree

Information Security Certification (CEH, CISM, CCSP, CCSK, CISSP, CompTIA Security+)

Tools

ACAS

Nessus

SCAP

STIG Viewer

eMASS

Job description

Booz Allen Hamilton seeks an Information Security Risk Specialist to work with DoD/IC clients, translating complex cyber risks into actionable mitigation plans. You will review policies, assess the threat landscape, and develop documents and milestones for risk reduction.

The role focuses on governance, risk management, and compliance, with opportunities to expand expertise across RMF, ATO processes, and security tooling in a mission-driven environment.