This role pays less than
95%
of similar roles. Most pay
$124,755–$185,000
— the shaded band above.
At the midpoint, this role pays about
$102k
versus about
$155k
for comparable roles.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
815 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 787 roles with salary data.
The Information System Security Officer is responsible for assessing and requesting customer authorization for company-managed classified endpoints, servers, networks, and security appliances while applying evolving U.S. Government cybersecurity policy. The role involves performing system auditing, virus scanning, and hardware and software configuration management as defined in approved documentation. You will monitor program system administrators to ensure compliance with security procedures and document clear criteria and test cases to validate requirements from NIST, the Intelligence Community, and the DoD. Key technical skills include Risk Management Framework (RMF) expertise, performing authorizations through a Governance, Risk, and Compliance tool, and managing incident response and data loss prevention. Required qualifications include a TS/SCI clearance with a polygraph and a DoD 8570 IAM Level II Certification. The role addresses the challenge of maintaining security posture for classified information systems.
Assess and request customer authorization for managed classified endpoints, servers, networks, and security appliances.
Apply U.S. Government cybersecurity policies and guidance to information systems.
Execute auditing, virus scanning, and configuration management for systems and network hardware.
Monitor system administrator activities to ensure compliance with established security procedures.
Document compliance criteria and test cases based on NIST, Intelligence Community, and DoD requirements.
Manage risk mitigation by selecting and designing security controls for implementation.
Maintain vulnerability scanning tool compliance and oversee patch management across all systems.
Engineer and implement automated solutions to improve the overall security posture of infrastructure.
What we're looking for
High school diploma or GED.
TS/SCI clearance with polygraph.
DoD 8570 IAM Level II Certification.
Experience applying security systems concepts, requirements, design development, implementation, and integration to information systems.
Knowledge of Risk Management Framework (RMF) and performing system assessment and authorization through a GRC tool.
Knowledge of risk mitigation and selecting/designing security controls for implementation.
Knowledge of incident response, data loss prevention, detection, and response.
Knowledge of NIST and FISMA requirements for monitoring and reporting; advanced certifications like CISSP or experience with vulnerability management (preferred).
NIST RMF
Information Assurance
Cybersecurity
Configuration Management
ServiceNow
Risk Assessment
Security Operations
Encryption
DoD 8570
IAM
System Security Plans
Firewalls
Hardware/Software Security
Communication Protocols
Risk Management Framework
XACTA
JSIG
ICD 503
DAAPM
NISPOM
DoD 8570
Information Assurance
Configuration Management
Encryption
C&A
System Security Plans
security information system s