ISSO: Security Risk & RMF Lead

Booz Allen Hamilton; Pearl City (HI); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking a seasoned cybersecurity professional to support information assurance programs. The role focuses on risk assessments, RMF packages, and vulnerability management across large enterprises, with emphasis on ACAS/HBSS and eMASS.

You will translate complex security concepts for leadership, collaborate with cross-functional teams, and help implement Defender for Endpoint and other controls. A Secret clearance and HS diploma are required.

Qualifications

• 5+ years of experience with information assurance or cybersecurity.
• Experience serving as an Information Systems Security Officer (ISSO).
• Experience managing and administering Assured Compliance Assessment Solution (ACAS) and Host-Based Security System (HBSS).
• Experience utilizing the Enterprise Mission Assurance Support Service (eMASS) to address security controls, create POA&Ms, and upload artifacts such as STIG checklists or ACAS scans
• Experience supporting system security and authorization processes
• Experience reviewing vulnerability documentation and writing residual risk statements
• Experience reporting IT security events or incidents based on policies and procedures
• Knowledge of Microsoft Defender for Endpoint (MDE)
• Secret clearance
• HS diploma or GED

Responsibilities

• Perform risk and vulnerability assessments across network, system, and application areas.
• Create and map STIGs, submit POA&M, and develop RMF documentation.
• Create RMF accreditation packages and support vulnerability management.
• Brief the security posture to client leadership and prepare summaries of vulnerabilities.
• Advise on how to prevent and mitigate future security threats.
• Implement infrastructure and cybersecurity controls and improve event detection and correlation.
• Leverage big data analytics to identify advanced threats or indicators of compromise.

Skills

information assurance

cybersecurity

ISSO

system security

vulnerability assessment

risk management

security reporting

security controls

security clearance

Education

HS diploma or GED

Bachelor's degree in IT

Tools

ACAS

HBSS

eMASS

Tenable Nessus

IBM Guardium

HP WebInspect

Nmap

Microsoft Defender for Endpoint

SecurityCenter

Job description

Booz Allen Hamilton is seeking a seasoned cybersecurity professional to support information assurance programs. The role focuses on risk assessments, RMF packages, and vulnerability management across large enterprises, with emphasis on ACAS/HBSS and eMASS.

You will translate complex security concepts for leadership, collaborate with cross-functional teams, and help implement Defender for Endpoint and other controls. A Secret clearance and HS diploma are required.