B

Booz Allen

Builds AI and cyber systems for the US government

Information Security Risk Specialist

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeAlbuquerque, NM, USA$99k - $225k /yrIn-person

About the Job

Requirements

  • At least 5 years of experience in cybersecurity or information technology.
  • At least 2 years of experience working directly with the Department of Defense Risk Management Framework (RMF) process Authorization to Operate (ATO) package development, including security control implementation and continuous monitoring efforts.
  • Experience with a current operating system or network devices.
  • Experience assessing organizational risks and recommending mitigation strategies.
  • Experience developing and maintaining RMF documentation, including policies, plans, and procedures.
  • Experience with RMF, Security Technical Implementation Guides (STIGs), NIST 800-53, NIST 800-161, and eMASS.
  • Ability to communicate clearly with technical and non-technical audiences, collaborate closely with teammates and client personnel, and hold oneself and teammates accountable to deadlines.
  • Top Secret clearance.
  • High school diploma or GED.
  • DoD 8140 Information Assurance Management Level 1 certification.

Responsibilities

  • Work with client leadership and subject matter experts to provide cybersecurity and privacy analysis throughout the security assessment and compliance life cycle.
  • Review technical and personnel details from product designers, client subject matter experts, and organizational partners to assess the threat landscape.
  • Plan, develop, and finalize continuous monitoring of cybersecurity and privacy policies, programs, compliance artifacts, and standards in support of security governance, industry security compliance, systems accreditation, and management.
  • Guide clients through plans of action using presentations, whitepapers, and milestones.
  • Translate security concepts for clients so they can make informed decisions to secure tools, data, and interconnections to partners.
  • Help build Booz Allen’s vulnerability management capability and service offerings while supporting client missions.

Desired Qualifications

  • Experience with a wide range of current and legacy operating systems, including Windows, Linux, and varieties of Unix.
  • Experience with network devices, including switches and routers.
  • Experience describing cloud environments, physical server rooms, and stand-alone enclaves.
  • Experience using and configuring vulnerability assessment tools.
  • Knowledge of cybersecurity principles, threat intelligence, penetration testing, Red Team, or incident response.

About the Company

Booz Allen

Builds AI and cyber systems for the US government

Booz Allen builds and runs technology for the U.S. government, mostly for the military and intelligence agencies, and its engineers work alongside consultants who know each agency's mission. In 1958, it helped the U.S. Navy create PERT, a project-scheduling method first used on the Polaris submarine missile program and later adopted across government and industry. Its teams design cyber defenses, AI and data tools, and battlefield communications, and it sells its own products, such as Vellox, a suite of AI tools that spot and fight off hackers. Agencies pay mainly through multi-year contracts that reimburse costs, bill hours, or set a fixed price. Booz Allen was founded in 1914 and is based in McLean, Virginia.

Company size
11-50
Company stage
IPO
Headquarters
McLean, VA
Founded
1914

Recently Posted Jobs

Explore more opportunities at Booz Allen

See more jobs