Information System Security Officer - Security Clearance Required

Booz Allen Hamilton; Washington (District of Columbia); Hybrid; USD 99,000 - 225,000; Full time

Job summary

A leading company is seeking an Information Security Risk Specialist to assess cyber risks and develop mitigation strategies for government agencies. This role involves collaboration with engineering and cybersecurity teams, providing operational security guidance, and translating complex security concepts for clients. Candidates should have extensive experience in cybersecurity and knowledge of relevant security tools.

Benefits

Comprehensive benefits

Flexible work arrangements

Qualifications

• 5+ years of experience in a cybersecurity role.
• Experience with NIST Risk Management Framework.
• Ability to operate security tools.

Responsibilities

• Assess cyber risks and develop mitigation plans.
• Guide teams and clients through action plans.
• Translate security concepts for informed decision-making.

Skills

Operational security guidance

Information system validation

Cloud infrastructure knowledge

DevSecOps practices

Security tools operation

Education

HS diploma or GED with 11+ years of IT experience

Bachelor's degree with 5+ years of IT experience

Bachelor's degree in STEM fields

Tools

Tenable Nessus

Security Center

IBM Guardium

HP WebInspect

Network Mapper

Job description

Warnings about cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies and law enforcement. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you – build your knowledge as an Information Security Risk Specialist who knows how to break down complex threats into manageable plans of action.

Job Description

As an Information Security Risk Specialist on our team, you’ll work with engineering and cybersecurity specialists as well as client leadership to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You’ll gather technical, environmental, and personnel details from SMEs and engineers to assess the entire threat landscape. Then, you’ll help guide your team and client through a plan of action with presentations, whitepapers, and milestones. You will translate security concepts for your client so they can make informed decisions to secure their mission-critical systems, select appropriate tools, and improve the security posture of the SOC. This role offers an opportunity to actively engage in information security while growing your skills through technical immersion in network security.

Qualifications

You Have:

• 5+ years of experience in a cybersecurity role
• Experience providing operational security guidance and information system validation using the NIST Risk Management Framework and security policies
• Experience with Authority to Operate package development
• Knowledge of Cloud infrastructure and DevSecOps practices
• Ability to operate security tools such as Tenable Nessus, Security Center, IBM Guardium, HP WebInspect, or Network Mapper
• HS diploma or GED with 11+ years of IT experience, or a Bachelor’s degree with 5+ years of IT experience

Nice If You Have:

• Knowledge of security controls in container environments
• Knowledge of cloud networking
• TS/SCI clearance with polygraph
• Bachelor’s degree in STEM fields

Additional Details

Clearance: Top Secret clearance is required, subject to security investigation.

Compensation: Salary ranges from $99,000 to $225,000 annually, depending on experience, location, and organizational factors.

Benefits and Work Model: We offer comprehensive benefits and flexible work arrangements, including remote, hybrid, and onsite options.

Equal Opportunity: We are committed to diversity and inclusion, providing consideration without regard to protected statuses.