Baseline Security Engineer, Lead

Booz Allen Hamilton•Usa, DC

About The Position

As a cyber professional supporting the SEC client’s cyber mission, the Baseline Security Engineer will help assess system risks, analyze NIST controls, and determine how to secure systems. The role works across cloud computing, data engineering, and enterprise workflow platforms, collaborating with multiple stakeholders to monitor security environments and identify security gaps from an adversary’s perspective. The engineer will monitor platforms for new and evolving threats and help improve the SEC’s security posture by identifying vulnerabilities before they can be exploited. Booz Allen offers mentoring, access to resources, and opportunities to earn in-demand certifications to support career development. Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client. The position requires the ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.

Requirements

At least 5 years of experience providing support to Information Technology operations.
Experience creating security baselines using CIS and STIG benchmarks.
Experience working with NIST Special Publication guidance for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
Experience reviewing, developing, or customizing general security configuration baselines.
Knowledge of the National Vulnerability Database (NVD) and Common Vulnerability Enumeration (CVE).
Ability to create security baselines from scratch using vendor documentation.
Ability to modify CIS and STIG benchmarks to meet organizational requirements.
Ability to translate low-level security baseline requirements into high-level FISMA and NIST requirements and client-specific security requirements.
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
High school diploma or GED.

Nice To Haves

Experience with networking technologies, including Cisco, Juniper, or Palo Alto; operating systems, including Windows Server, Red Hat, or Linux; cloud services, including AWS, Azure, Salesforce, Okta, O365, or ServiceNow; or mobile technologies, including iOS or Xen Mobile.
Experience designing, building, and implementing automation tools, including Ansible, Chef, or Puppet.
Experience with Infrastructure-as-Code tools, including CloudFormation or Terraform.
Experience with container platforms, including OpenShift.
Experience with chaos engineering and blue or green deployments.
Experience with serverless technologies, including Lambda, API Gateway, Step Functions, and SAM.
Experience with application performance analysis and monitoring, including ELK.
Experience with JSON or YAML programming.
Bachelor’s degree.
AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MSCE, RHCSA, EBSA, or ECSS certification.

Responsibilities

Create security baselines using CIS and STIG benchmarks, including developing baselines from scratch using vendor documentation.
Review, develop, or customize general security configuration baselines.
Modify CIS and STIG benchmarks to meet organizational requirements.
Translate low-level security baseline requirements into high-level FISMA and NIST requirements and client-specific security requirements.
Evaluate system risks and analyze NIST controls with stakeholders.
Monitor security environments and platforms for new and evolving threats and identify security gaps.