Remote Senior ISSE: RMF, AI Security & Secure Systems

Booz Allen; Fort Meade (MD); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen is seeking an Information Systems Security Engineer (ISSE) to apply cybersecurity expertise across RMF, risk assessment, and secure system design. You will lead authorization packages, ATO processes, and artifact development while guiding remediation across teams.

You will use ACAS, SCAP, and eMASS to ensure STIG compliance and support AI-enabled environments, mentoring staff and integrating security throughout the system lifecycle.

Qualifications

• Experience with RMF-based authorization packages, ATOs and re-authorizations.
• Experience conducting security assessments, vulnerability remediation, and continuous monitoring in RMF context.
• Experience with compliance scanning and VM tools, especially ACAS/SCAP.
• Experience implementing DoD cybersecurity directives including STIGs and IAVM.
• Experience updating and maintaining eMASS with scan results and evidence packages.
• Knowledge of system lifecycle management and procurement cybersecurity requirements.
• Ability to prepare cybersecurity documentation including SSPs, SARs and POA&Ms.
• Ability to analyze architectures to identify and mitigate risks.

Responsibilities

• Identify security controls, assessment tools and authorization strategies for secure integration of emerging technologies.
• Lead RMF authorization package creation, ATO processes and artifact development.
• Coordinate vulnerability remediation across project teams and lifecycle phases.
• Mentor professionals, guide security assessments and remediation efforts across systems.

Skills

RMF experience

Security assessments

Vulnerability remediation

ACAS/SCAP

eMASS administration

STIGs knowledge

POA&M documentation

DoD governance

Education

HS diploma or GED

Bachelor's degree

Tools

DevSecOps tooling

CI/CD security

Python scripting

PowerShell

Ansible

Job description

Booz Allen is seeking an Information Systems Security Engineer (ISSE) to apply cybersecurity expertise across RMF, risk assessment, and secure system design. You will lead authorization packages, ATO processes, and artifact development while guiding remediation across teams.

You will use ACAS, SCAP, and eMASS to ensure STIG compliance and support AI-enabled environments, mentoring staff and integrating security throughout the system lifecycle.