This role pays more than
59%
of similar roles. Most pay
$128,500–$193,000
— the shaded band above.
At the midpoint, this role pays about
$162k
versus about
$161k
for comparable roles.
Based on 239 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
802 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 783 roles with salary data.
Information Systems Security Officer
As part of a team of communications and systems engineers, the Information Systems Security Officer performs ongoing system analysis, risk assessments, and vulnerability management for various programs. The role involves creating and mapping Security Technical Implementation Guides, developing Plans of Action and Milestones, and preparing documentation for Risk Management Framework accreditations. You will also brief leadership on technical security postures and advise on mitigating future threats. Key responsibilities include implementing infrastructure and cybersecurity controls while leveraging big data analytics to identify advanced threats. Required expertise includes managing ACAS and HBSS tools, utilizing eMASS for security controls, and knowledge of Microsoft Defender for Endpoint. Preferred skills include experience with Tenable Nessus, SecurityCenter, IBM Guardium, HP WebInspect, or Network Mapper. This role addresses the critical challenge of securing network, system, and application areas within large enterprises.
Perform risk assessments of systems and equipment to identify and resolve security vulnerabilities.
Create and map Security Technical Implementation Guides (STIGs) for system components.
Develop Plans of Action and Milestones (POA&M) and manage Risk Management Framework (RMF) accreditations.
Manage vulnerability scans and artifacts using automated tools like ACAS, HBSS, and eMASS.
Brief client leadership on technical security postures, including risk summaries and mitigation strategies.
Implement infrastructure and cybersecurity controls to improve detection and event correlation.
Analyze big data and security events to identify advanced threats or indicators of compromise.
What we're looking for
High school diploma or GED.
5+ years of experience with information assurance or cybersecurity.
Experience serving as an Information Systems Security Officer (ISSO).
Experience managing and administering ACAS and HBSS.
Experience using eMASS to manage security controls, create POA&Ms, and upload artifacts like STIG checklists or ACAS scans.
Experience supporting system security and authorization processes, including reviewing vulnerability documentation and writing residual risk statements.
Knowledge of Microsoft Defender for Endpoint (MDE) (preferred); knowledge of cloud infrastructure and DevSecOps (preferred).
NIST RMF
Information Assurance
Cybersecurity
Configuration Management
ServiceNow
Risk Assessment
Security Operations
Encryption
DoD 8570
IAM
System Security Plans
Firewalls
Hardware/Software Security
Communication Protocols
RMF
ACAS
STIG
eMASS
DevSecOps
Linux
Windows
Firewalls
Intrusion Prevention Systems
Network Engineering
zero-trust
Big Data Analytics
NIPR
SIPR
CCNA
Cybersecurity Policy
Risk Management
RMF
ACAS
STIG
eMASS
DevSecOps
Vulnerability Assessment
Network Security
Linux
Windows
Virtualization
Intrusion Prevention Systems
Firewalls
Big Data Analytics
Cybersecurity Policy
Systems Development Lifecycle
RMF
ACAS
STIGing
eMASS
DevSecOps
Network Security
System Administration
Windows
Linux
Firewalls
Intrusion Prevention Systems
Big Data Analytics
Configuration Management
Data Flow Diagrams
Boundary Diagrams
Systems Development Lifecycle
RMF
NIST 800-53
Zero Trust
STIGs
Vulnerability Management
ATO
POA&M
Continuous Monitoring
DevSecOps
AWS
Microsoft Azure
Big Data Analytics
Cybersecurity Engineering
Information Systems Security