Information Security Risk Specialist

Booz Allen Hamilton

. Work with the DoD to discover cyber risks, understand applicable policies, and develop mitigation plans .

Posted 10/26/2026full-timeSt Inigoes • Maryland • United StatesJuniorMid-Level💰 $99,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity and Risk Management Framework (RMF) practices, with a strong focus on identifying security requirements for various systems. Proficient in building relationships with vendors and sponsors while guiding clients through actionable plans and informed decision-making.

Highest-signal resume keywords

EMASS ExperienceCISSP CertificationISSO ExperienceRisk Management Framework (RMF)Secret Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecuritySecurity Requirements IdentificationThreat Landscape AssessmentWorkflow ManagementArchitecture Diagrams

Soft Skills

Team LeadershipMentoringClient Communication

Tools & Technologies

Microsoft OfficeEMASSterSecurity Technical Implementation Guides (STIG)Assured Compliance Assessment Solution (ACAS)Host Based Security System (HBSS)

Certifications & Qualifications

CISSPCISMCCSP

Industry Keywords

Department of Defense (DoD)National Security Systems (NSS)Army ATO POA&MsPorts, Protocols and Services MatrixSecurity Content Automation Protocol (SCAP)

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Work with the DoD to discover cyber risks, understand applicable policies, and develop mitigation plans
Review technical, environmental, and personnel details from SMEs, engineers, and program managers to assess the threat landscape
Guide clients through plans of action using presentations, white papers, and milestones
Translate security concepts so clients can make informed decisions about mission-critical systems and critical infrastructure
Act as an information security subject matter expert
Broaden cybersecurity and Risk Management Framework (RMF) skills
Protect military communications and national cyber infrastructure

Requirements

What you’ll need

2+ years of experience with eMASS
Experience with Army or National Guard Bureau (NGB) RMF
Ability to build vendor and sponsor relationships
Ability to identify security requirements for connected and non-connected systems and unclassified, classified, and National Security Systems (NSS)
Secret clearance is required
Associate's degree
CISSP, CISM, or CCSP Certification
5+ years of experience with eMASS
Experience with Army ATO POA&Ms
Experience as an ISSO, ISSM, or ISSE
Experience with people and team leadership
Experience mentoring in the field of cybersecurity
Experience with Microsoft Office products, including Word, Excel, PowerPoint, and Visio
Experience with eMASSter, Security Technical Implementation Guides (STIG), Evaluate-STIG, Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), Ports, Protocols and Services Matrix, and Host Based Security System (HBSS)
Ability to manage workflows, system data flows, and architecture diagrams
Master's degree is nice to have
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program
Identity verification and fraud protection process