Baseline Security Engineer, Lead

Booz Allen Hamilton • Washington, DC

3d • $99,000 - $225,000 • Hybrid

About The Position

As a cyber professional supporting the SEC, the Baseline Security Engineer helps develop intelligence and strategies that mitigate vulnerabilities and strengthen cybersecurity. The role works across cloud computing, data engineering, and enterprise workflow platforms, collaborating with stakeholders to evaluate system risks, analyze NIST controls, and determine appropriate security measures. The engineer monitors security environments and platforms for evolving threats and identifies gaps before adversaries can exploit them, contributing to the SEC’s security posture.

The position offers opportunities to expand a cybersecurity career through mentoring, access to resources, and in-demand certifications. Booz Allen supports work across private and public sectors and multiple geographies. The role is hybrid and requires work at a Booz Allen or customer facility in alignment with leadership expectations and role needs. Applicants selected will be subject to a government investigation and may need to meet U.S. government client eligibility requirements.

Requirements

• At least 5 years of experience providing support to Information Technology operations.
• Experience creating security baselines using CIS and STIG benchmarks.
• Experience working with NIST 800 Special Publication guidance for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
• Experience reviewing, developing, or customizing general security configuration baselines.
• Knowledge of the National Vulnerability Database (NVD) and Common Vulnerability Enumeration (CVE).
• Ability to create security baselines from scratch using vendor documentation.
• Ability to modify CIS and STIG benchmarks to meet organizational requirements.
• Ability to translate low-level security baseline requirements into high-level FISMA and NIST requirements and client-specific security requirements.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
• High school diploma or GED.

Nice To Haves

• Experience with networking technologies such as Cisco, Juniper, or Palo Alto; operating systems such as Windows Server, Red Hat, or Linux; cloud services such as AWS, Azure, Salesforce, Okta, O365, or ServiceNow; or mobile technologies such as iOS or Xen Mobile.
• Experience designing, building, and implementing automation tools such as Ansible, Chef, or Puppet.
• Experience with Infrastructure-as-Code tools such as CloudFormation or Terraform.
• Experience with container platforms such as OpenShift.
• Experience with chaos engineering and blue or green deployments.
• Experience with serverless technologies, including Lambda, API Gateway, Step Functions, and SAM.
• Experience with application performance analysis and monitoring, including ELK.
• Experience with JSON or YAML programming.
• Bachelor’s degree.
• AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MSCE, RHCSA, EBSA, or ECSS certification.

Responsibilities

• Create security baselines using CIS and STIG benchmarks and vendor documentation.
• Review, develop, or customize general security configuration baselines.
• Modify CIS and STIG benchmarks to meet organizational requirements.
• Translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security requirements.
• Evaluate system risks and analyze NIST controls with stakeholders.
• Monitor security environments and platforms for new and evolving threats.
• Identify security gaps and vulnerabilities before they can be accessed by an adversary.
• Provide support to information technology operations.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED