below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$127,500–$190,650.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
1724 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 898 roles with salary data.
The Information Security Risk Specialist joins the team to identify cyber risks and develop mitigation strategies for DoD government systems. You will collaborate with system owners, administrators, and developers to evaluate technical infrastructure and personnel dynamics. Daily responsibilities include performing risk assessments, conducting security control assessments in cloud-native and containerized environments, and guiding clients through actionable remediation plans via white papers and presentations. You will utilize NIST SP 800-53, CNSSI 1253, and RMF frameworks while employing tools like ACAS, SCAP, STIGs, eMASS, and Xacta. The role requires expertise in AWS, Azure, and hybrid cloud security, as well as aligning DevSecOps pipelines with cybersecurity policies. You will provide technical guidance on platform hardening for Kubernetes and Rancher to ensure robust cybersecurity resilience.
Identify cyber risks and analyze applicable policies for DoD government systems.
Develop comprehensive mitigation strategies based on technical infrastructure and personnel dynamics.
Perform technical evaluations and security control assessments in cloud-native and containerized environments.
Guide clients through actionable remediation plans using presentations, white papers, and milestones.
Align DevSecOps pipelines with cybersecurity policies in coordination with engineering teams.
Conduct risk assessments and manage RMF processes for AWS, Azure, or hybrid cloud environments.
Generate security artifacts including SSPs, POA&Ms, and SAPs using NIST SP 800-53 standards.
Translate complex security concepts into actionable decisions for stakeholders to secure critical systems.
What we're looking for
High school diploma or GED.
DoD 8570 Level II Security+ Certification.
5+ years of experience working in a professional IT environment.
3+ years of experience in cybersecurity and Assessment and Authorization (A&A) supporting DoD environments.
Experience supporting federal government or DoD ATO packages, performing A&A and RMF, and conducting risk assessments for systems in AWS, Azure, or hybrid cloud.
Experience performing technical evaluations and security control assessments in cloud-native and containerized environments.
Experience with NIST SP 800-53, CNSSI 1253, artifact generation, SSPs, POA&Ms, SAPs, risk assessments, and continuous monitoring.
Cybersecurity Governance
Risk Management
Compliance
NIST 800-53
DoD 8500
AWS
Azure
Google Cloud Platform
eMASS
Next-Generation Firewall
AI
Machine Learning
Big Data
Information Security
Audit