ISSO Cybersecurity Engineer, Lead

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Aberdeen Proving Ground, MDAlexandria, VA
Employment: Full-time
Posted: 49 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $177k

$117k $231k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $151,393–$203,218.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1781 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 898 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · ISSO Cybersecurity Engineer, Lead

Role Posting Log in to save

The ISSO Cybersecurity Engineer, Lead manages RMF governance activities for DoD information systems to ensure accurate cybersecurity posture and authorization artifacts. You will own the RMF lifecycle, maintaining SSPs, ConMon Plans, and IRPs while performing eMASS package administration and quality assurance. Daily tasks include analyzing NIST SP 800-53 Rev.5 controls, developing Security Impact Assessments, and coordinating with engineers on data-connection reviews. You will utilize tools and technologies including eMASS, ACAS, Nessus, STIGs, and SCAP to validate vulnerability findings and remediation evidence. The role requires expertise in Windows, Linux, AWS Cloud, and containerization systems. You must navigate complex technical requirements involving TCP/IP, PKI, encryption, and identity management to solve security problems related to system boundaries, data flows, and interconnection documentation for Department of Defense networks.

Skills

RMF eMASS NIST SP 800-53 STIG ACAS SCAP AWS Windows Linux Containerization TCP, IP Firewalls PKI Encryption Identity and Access Management Nessus SCC Network Security Technical Writing ICAM

What you'll do

Manage the RMF lifecycle activities and maintain all authorization package records.
Perform eMASS package administration and quality assurance for DoD information systems.
Maintain system security plans, control narratives, inventories, and supporting evidence.
Coordinate monthly POA&M updates, evidence validation, and milestone tracking.
Translate NIST SP 800-53 controls into system-specific implementation statements.
Develop Security Impact Assessments for proposed system and configuration changes.
Analyze STIG, SCAP, and ACAS findings to validate remediation and closure packages.
Review data connections for ports, protocols, encryption, and boundary protection.

What we're looking for

8+ years of experience with DoD RMF or cybersecurity.
Experience using eMASS to address security controls, create POA&Ms, and upload artifacts like STIG checklists or ACAS scans.
Experience with the administration of Windows, Linux, AWS Cloud, and containerization systems and software configuration.
Knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, DoDI 8510.01, POA&M management, and DoD authorization practices.
Knowledge of TCP, IP, ports, protocols, firewalls, segmentation, PKI, encryption, identity and access management, and DoD network security concepts.
Ability to validate STIG and vulnerability findings using ACAS, Nessus, SCAP, SCC, and other manual procedures.
Bachelor's degree in a technical field such as Engineering or Cyber.
TS/SCI clearance.

Save