Senior ISSO: RMF & Vulnerability Management

Booz Allen Hamilton; Illinois; On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Systems Security Officer to support engineering, sustainment, and management of communications systems. You will conduct risk assessments, map STIGs, and develop RMF documentation while coordinating with leadership and engineering teams.

Expect to work across large-scale environments with a focus on vulnerability management and advanced threat detection. Applicants should have 5+ years in information assurance, ISSO experience, and a secret

Qualifications

• 5+ years of experience with information assurance or cybersecurity.
• Experience serving as an Information Systems Security Officer (ISSO).
• Experience managing and administering ACAS and HBSS.
• Experience utilizing the eMASS to address security controls, create POA&Ms, and upload artifacts such as STIG checklists or ACAS scans.
• Experience supporting system security and authorization processes.
• Experience reviewing vulnerability documentation and writing residual risk statements.
• Experience reporting IT security events or incidents based on policies and procedures.
• Knowledge of Microsoft Defender for Endpoint (MDE).
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Perform ongoing system analysis activities for programs.
• Perform risk assessments of systems and equipment; assist engineers with vulnerabilities.
• Create and map STIGs; submit change requests for system components.
• Develop POA&Ms; create documentation supporting RMF accreditations.
• Perform vulnerability management and RMF package submission.
• Brief the technical security posture to client leadership with clear summaries.
• Develop relationships across teams and communicate security concepts to diverse audiences.
• Implement infrastructure and cybersecurity controls to improve detection and event correlation.

Skills

Cybersecurity experience

ISSO experience

Security incident reporting

Residual risk statements

Security & authorization processes

Vulnerability reviews

MDE knowledge

Security clearance

HS diploma/GED

Cloud/DevSecOps

Education

HS diploma or GED

Bachelor’s degree in IT

Tools

ACAS

HBSS

eMASS

Tenable Nessus

SecurityCenter

IBM Guardium

HP WebInspect

Network Mapper

Job description

Booz Allen Hamilton is seeking an Information Systems Security Officer to support engineering, sustainment, and management of communications systems. You will conduct risk assessments, map STIGs, and develop RMF documentation while coordinating with leadership and engineering teams.

Expect to work across large-scale environments with a focus on vulnerability management and advanced threat detection. Applicants should have 5+ years in information assurance, ISSO experience, and a secret