Information Security Risk Specialist, Senior

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise” how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an Information Security Risk Specialist to help break down complex threats into manageable plans of action. This is your opportunity to build experience in a strategic information security role while developing skills in AI, cloud computing, and cyber risk analysis.

Responsibilities

• Implement information assurance processes or policies, or software supply chain management
• Analyze and manage software vulnerability reports
• Apply DoW RMF procedures and policies
• Work with containerized software and DevSecOps pipeline software bill of materials solutions
• Build and maintain a Software Bill of Materials (SBOM) across large and varied organizations

Requirements

• 3+ years of experience implementing information assurance processes or policies, or software supply chain management
• Experience analyzing and managing software vulnerability reports
• Experience with DoW RMF procedures and policies
• Experience with containerized software and DevSecOps pipeline software bill of materials solutions
• Experience building and maintaining a Software Bill of Materials (SBOM) across large and varied organizations
• Secret clearance
• HS diploma or GED

Qualifications

• Experience serving as an Information Systems Security Officer (ISSO)
• Experience utilizing the Enterprise Mission Assurance Support Service (eMASS) to address security controls, create POA&Ms, and upload artifacts such as STIG checklists or ACAS scans
• Knowledge of Cloud-based infrastructure and DevSecOps principles and practices
• Knowledge of security tools such as Microsoft Intune or Microsoft Defender
• Ability to use and operate security tools, including Tenable Nessus, SecurityCenter, IBM Guardium, HP WebInspect, or Network Mapper
• Ability to meet DoW 8140 requirements

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development and tuition assistance
• Work-life programs and dependent care
• Recognition awards program for exceptional performance and superior demonstration of company values

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Pay

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Schedule

This posting will close within 90 days from the posting date.

Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

As part of the hiring process, you will be asked to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.