Booz Allen
InformationSystemSecurityOfficer,Mid
Neural analysis suggests this role is
optimal for Mid candidates.
“Information System Security Officer, Mid at Booz Allen. Skills: Information System Security, Vulnerability Management, Risk Management Framework, Cybersecurity Guidance. Perform analysis of policies. Ensure security controls implemented”
Industry & Context.
Develop and contribute to solutions to a variety of problems of moderate scope and complexity
Ability to travel up to 25% of the time, Secret clearance, Identity verification process, On camera during interviews and assessments
What They're Looking For.
Must Have
1+ years of experience with hands-on security hardening, vulnerability management, audit log review in a Microsoft Windows environment, Knowledge of the DoD and IC Risk Management Framework (RMF), NIST 800 series, industrial security requirements under the National Industrial Security Program Operating Manual (NISPOM), DCSA Assessment and Authorization Process Manual (DAAPM), network and information system security principles, best practices, technical system security reviews using scan tools, Secret clearance, HS diploma or GED, DoD 8570.01-M IAM Level Certification
Nice to Have
Experience with SIPRNet, CORA inspections, MS Windows OS, MS Server, Cisco, Juniper, Brocade networking equipment, ICD 503, ICD 703, eMASS, TS/SCI clearance
What You'll Do.
Perform analysis of policies
Ensure security controls implemented
Continuously monitor controls
Conduct validation and verification
Contribute to solutions
Support development of documentation
Maintain Assessment and Authorization documentation
Provide cybersecurity guidance
How You'll Work.
Team & Collaboration
Provide cybersecurity guidance across technical and non-technical clients and peers
Communication Scope
Provide cybersecurity guidance across technical and non-technical clients and peers
Full Job Description
Information System Security Officer, Mid **The Opportunity:** Perform analysis of policies and procedures to ensure information system security controls are implemented and continuously monitored throughout the system development life cycle. Conduct hands-on validation and verification of system security hardening, vulnerability management and analysis, and audit log review by applying technical expertise and specific functional, working, and general industry knowledge to ensure system requirements are secured. Develop and contribute to solutions to a variety of problems of moderate scope and complexity. Support the development and maintenance of Assessment and Authorization documentation such as the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action and Milestones (POA&M). Provide cybersecurity guidance across technical and non-technical clients and peers. **You Have:** * 1+ years of experience with hands-on security hardening, vulnerability management, and audit log review in a Microsoft Windows environment * Knowledge of the DoD and IC Risk Management Framework (RMF), NIST 800 series, and industrial security requirements under the National Industrial Security Program Operating Manual (NISPOM) and DCSA Assessment and Authorization Process Manual (DAAPM) * Knowledge of network and information system security principles and best practices * Ability to conduct technical system security reviews using scan tools such as ACAS, Nessus, and SCAP * Ability to travel up to 25% of the time * Secret clearance * HS diploma or GED * DoD 8570.01-M IAM Level I Certification **Nice If You Have:** * Experience with SIPRNet and CORA inspections * Experience with MS Windows OS, MS Server, Cisco, Juniper, or Brocade networking equipment * Knowledge of ICD 503 or ICD 703 * Knowledge of eMASS * Ability to work independently while delivering on-time results * TS/SCI clearance **Clearance:** Applicants selected will be subject to a security investigation and
Applying for this Information System Security Officer, Mid role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about Booz Allen?
Real rants from real employees. Read before you apply.