Information Security Risk Specialist
Booz Allen Hamilton
This job at a glance
- Who can apply
- New grads, no experience needed · Bachelor's degree
- Must know
- Vulnerability management
- Nice to have
- Cybersecurity
- Work
- On-site in Saint Inigoes
- Pay
- $61.9K–$141K a year
- Skill demand
- Cybersecurity68%Vulnerability management46%of 99 similar entry-level jobs posted in the US this week
- Listed
- Oct 29, 2026 · still open
Sign in free to see which of these skills your resume already shows.
The Opportunity
As an information security risk specialist, you will assist military leaders with discovering their cyber risks, understanding applicable policies, and developing mitigation plans. You will gather technical and personnel details from subject matter experts to help with the assessment of the entire threat landscape. You will guide clients through plans of action with presentations, white papers, and milestones, and help translate security concepts for decision-making regarding critical systems.
Key Responsibilities
- Assist military leaders with discovering cyber risks.
- Understand applicable policies.
- Develop mitigation plans.
- Gather technical and personnel details from subject matter experts for threat landscape assessment.
- Guide clients through plans of action using presentations, white papers, and milestones.
- Translate security concepts for client decision-making on critical systems.
Requirements & Tech Stack
- DoD system authorization and Authorization to Operate (ATO) activities
- Analyzing and prioritizing vulnerability scan results
- Developing and maintaining hardware and software inventories
- Tracking vulnerabilities and supporting remediation activities
- Developing and supporting Security Assessment Plans (SAPs), Security Assessment Reports (SARs), RMF artifacts, control assessments, and authorization packages in accordance with DoD RMF requirements
- Knowledge of Ports, Protocols, and Services Management (PPSM)
- Ability to operate in a structured and compliance-driven environment executing established cybersecurity processes with minimal supervision.
- Secret clearance
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering
- DoD 8140, 752- Cyber Policy and Strategy Planner, Intermediate Certification
Nice to Have
- Experience leading and executing the Department of Defense (DoD) Risk Management Framework (RMF) for DoD information systems, including full lifecycle implementation across RMF steps, application of DoD and DoD Component cybersecurity policies, procedures, and directives, and development and management of Plans of Actions and Milestones (POA&M).
- Experience reviewing, interpreting, and enforcing Security Technical Implementation Guides (STIGs) using STIG Viewer.
- Experience using eMASS and ACAS within a DoD environment.
- Top Secret clearance.
- Master’s degree.
Compensation
- Projected compensation range: $61,900.00 to $141,000.00 (annualized USD).