ISSO: Mission-Critical Cyber Defense & RMF Expert

Booz Allen Hamilton; North Dakota; On-site; USD 78,000 - 176,000; Full time

Job summary

Booz Allen Hamilton in the United States is seeking an Information System Security Officer (ISSO) to assess and request customer authorization for classified endpoints, servers, networks, and security appliances, applying evolving U.S. Government cybersecurity policy and guidance.

You will conduct system auditing, virus scanning, and configuration management per policy, monitor admins, and document clear compliance criteria and test cases to validate a growing baseline of NIST, DoD and FISMA

Qualifications

• RMF knowledge and system assessment experience.
• Experience using a Governance, Risk, and Compliance (GRC) tool for authorization workflows.
• Ability to design and implement security controls.
• Experience with incident response and data loss prevention.
• Knowledge of NIST and FISMA requirements for monitoring and reporting.
• TS/SCI clearance with a polygraph.
• HS diploma or GED.

Responsibilities

• Assess and request customer authorization for classified endpoints, servers, networks, and security appliances.
• Apply evolving U.S. Government cybersecurity policy and guidance.
• Ensure auditing, virus scanning, and configuration management per policy.
• Monitor activities of program system administrators to enforce procedures.
• Document compliance criteria and test cases for evolving baselines.

Skills

RMF knowledge

GRC tool

Security controls design

Incident response

NIST/FISMA knowledge

TS/SCI clearance with polygraph

Education

HS diploma or GED

Tools

GRC tool

Vulnerability scanning tools

Job description

Booz Allen Hamilton in the United States is seeking an Information System Security Officer (ISSO) to assess and request customer authorization for classified endpoints, servers, networks, and security appliances, applying evolving U.S. Government cybersecurity policy and guidance.

You will conduct system auditing, virus scanning, and configuration management per policy, monitor admins, and document clear compliance criteria and test cases to validate a growing baseline of NIST, DoD and FISMA