Information System Security Officer

Responsibilities

You’ll ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration. You will coordinate changes or modifications with the appropriate Information System Security Manager (ISSM) and implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation. You’ll perform the documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Test (IATT) and Authority to Operate (ATO).

You will support DoD and military clients in developing cutting‑edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies. Assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective. Works with minimal supervision within established procedures and practices.

With mentoring, challenging hands‑on problem‑solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect critical AI and ML networks for vital client missions and operations.

You Have:

• 3+ years of experience with guiding a client through the entire Risk Management Framework (RMF) and Authority to Operate (ATO) process

• Experience working as an Information System Security Officer (ISSO), or a role in Information Technology or IT Service Management

• Experience in reviewing enterprise and code vulnerability scan reports using security tools such as Fortify and ACAS, annotating the risk remediation efforts, and conducting security control assessments to ensure security principles are applied and compliance is met with DoD directives, and Security Technical Implementation Guides (STIGs)

• Knowledge of the DoD Risk Management Framework (RMF), NIST 800-series Security Control Documentation, Body of Evidence requirements, and Interim Authority to Test (IATT)

• Knowledge of information security and it’s implications on cyber security activities in averting IT threats, attacks, or vulnerabilities

• Knowledge of the U.S. military and DoD IT environments

• Ability to perform a root cause analysis review and document results using a Plan of Action and Milestone (POA&M) format

• TS/SCI clearance

• Associate’s degree and 7+ years of experience in cybersecurity, Bachelor’s degree and 3+ years of experience in cybersecurity, or 9+ years of experience in cybersecurity in lieu of a degree

• DoD 8140 IAT Level II Certification

Nice If You Have:

• Experience with applying abstract security requirements

• Experience in advising environment and communicating technical subjects to clients

• Experience with System Information and Event Management (SIEM) tools such as Elastic, Kibana, or related

• Experience with eMASS or XACTA

• Knowledge of Vulnerability Management, Configuration Management, Data Management, and Agile processes

• Knowledge of enterprise environments and cloud architecture

• Ability to clearly express processes and procedures and collaborate with other teams to determine gaps

• Possession of excellent verbal and written communication skills

• DoD 8140 IAT Level III Certification

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.

Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn…