Senior ISSO — RMF, Vulnerability Mgmt & Remote

Booz Allen Hamilton; Hawaii; Hybrid; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Systems Security Officer to perform risk assessments, develop RMF documentation, and manage security controls across complex systems. The role requires ISSO experience, security tooling proficiency, and a proactive approach to safeguarding government and enterprise networks.

You will collaborate with engineering and management teams to communicate vulnerabilities, develop remediation plans, and ensure accreditation readiness, while maintaining strict

Qualifications

• 5+ years of experience with information assurance or cybersecurity.
• Experience serving as an Information Systems Security Officer (ISSO).
• Experience managing and administering ACAS and HBSS.
• Experience utilizing eMASS to address security controls, create POA&Ms, and upload artifacts.
• Experience supporting system security and authorization processes.
• Experience reviewing vulnerability documentation and writing residual risk statements.
• Experience reporting IT security events or incidents based on policies and procedures.
• Knowledge of Microsoft Defender for Endpoint (MDE).
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Perform ongoing system analysis activities for programs and security posture.
• Develop RMF documentation and accreditation artifacts; map STIGs and POA&Ms.
• Conduct risk and vulnerability assessments; support vulnerability management.
• Brief leadership on security posture and remediation strategies; create summaries of vulnerabilities.

Skills

Information assurance

Cybersecurity

ISSO

ACAS & HBSS

eMASS

Education

HS diploma or GED

Bachelor's degree in IT

Tools

Tenable Nessus

IBM Guardium

HP WebInspect

SecurityCenter

Network Mapper

Job description

Booz Allen Hamilton is seeking an Information Systems Security Officer to perform risk assessments, develop RMF documentation, and manage security controls across complex systems. The role requires ISSO experience, security tooling proficiency, and a proactive approach to safeguarding government and enterprise networks.

You will collaborate with engineering and management teams to communicate vulnerabilities, develop remediation plans, and ensure accreditation readiness, while maintaining strict