Baseline Security Engineer, Lead

Booz Allen Hamilton • Washington, DC

102d • $77,600 - $176,000

About The Position

The Baseline Security Engineer, Lead will develop and implement security solutions in alignment with security strategy. The role requires maintaining an awareness of market and technology trends to bring best of breed solutions to the client. The engineer will apply leading-edge principles, theories, and concepts and contribute to the development of new principles and concepts. This position involves working on unusually complex problems and providing highly innovative solutions. The engineer will operate with substantial latitude for unreviewed action or decision and mentor or supervise employees in both company and technical competencies. Close collaboration with government stakeholders is essential to understand the vision and direction of the information technology program, decompose this architecture and associated use cases into discrete components that can be addressed from a cybersecurity engineering standpoint. The engineer must understand proposed and in-place architectures at a level that enables the identification and understanding of possible security risks and propose solutions for risk mitigation.

Requirements

• 5+ years of experience providing support to Information Technology (IT) operations.
• Experience creating security baselines using CIS and STIG benchmarks.
• Experience creating security baselines from scratch using vendor documentation.
• Experience with modifying CIS and STIG benchmarks to meet organizational requirements.
• Experience working with the NIST 800 Special Publication series guidance for risk management and security control implementation.
• Experience reviewing, developing, or customizing general security configuration baselines.
• Knowledge of the National Vulnerability Database (NVD) and Common Vulnerability Enumeration (CVE).
• Ability to translate low-level security baseline requirements into high-level FISMA and NIST requirements.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
• HS diploma or GED.

Nice To Haves

• Experience with networking, including CISCO, Juniper, or Palo Alto.
• Experience with operating systems, including Windows Server, Red Hat, or Linux.
• Experience with cloud services, including AWS, Azure, Salesforce, Okta, O365, or ServiceNow.
• Experience with mobile technologies, including iOS or Xen Mobile.
• Experience designing, building, and implementing automation tools, including Ansible, Chef, or Puppet.
• Experience with Infrastructure as Code tools, including Cloud Formations or Terraform.
• Experience with container platforms, including OpenShift.
• Experience with chaos engineering and blue or green deployments.
• Experience with Serverless technologies, including Lambda, API Gateway, Step Functions, and SAM.
• Experience with application performance analysis and monitoring, including ELK.
• Experience with JSON or YAML programming.
• Bachelor's degree.
• AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MSCE, RHCSA, EBSA, or ECSS Certification.

Responsibilities

• Develop and implement security solutions in alignment with security strategy.
• Maintain awareness of market and technology trends.
• Apply leading-edge principles, theories, and concepts.
• Contribute to the development of new principles and concepts.
• Work on unusually complex problems and provide highly innovative solutions.
• Mentor or supervise employees in both company and technical competencies.
• Collaborate with government stakeholders to understand IT program vision and direction.
• Decompose architecture and use cases into discrete components for cybersecurity engineering.
• Identify and understand possible security risks and propose solutions for risk mitigation.

Benefits

• Health, life, and disability insurance.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards program for exceptional performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees