Cloud Cybersecurity Engineer

Booz Allen Hamilton•Usa, NY

6d•Remote

About The Position

As a cybersecurity engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. What if you could use your cloud security skills to improve mission-critical applications for the Intelligence Community (IC)? We need you to help us develop cloud-based security solutions for some of the IC's most critical systems. As a cybersecurity engineer on our team, you’ll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements. You'll assist in defining the organization’s preferred state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to codify strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with the evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You’ll recommend tools and capabilities based on your research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements. Your technical experience will be vital as you work with our clients to ensure standards are met with information assurance and security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customers’ environment while collaborating with tomorrow’s cloud security experts. Join us. The world can’t wait.

Requirements

1+ years of experience developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans
1+ years of experience with security architecture evaluations, guidance development, and troubleshooting
1+ years of experience working with cloud service providers, including Amazon Web Services or Microsoft Azure
Knowledge of the NIST RMF and NIST SP 800-53 Security and Privacy Controls, FISMA, or FEDRAMP
Ability to use SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC Tools
Ability to manage security applications within a Cloud Service Provider, including Amazon Web Services (AWS), Microsoft Azure, or Google Cloud
Ability to use cloud services or security applications to generate reports to conduct security analysis of processes and platforms
Top Secret clearance
HS diploma or GED
IAT or IAM Level II DoD 8570 Certification

Nice To Haves

5+ years of experience in Cybersecurity
Experience with the software development life cycle (SDLC) or DevSecOps
Experience working with security applications to conduct enterprise vulnerability scanning
Experience conducting penetration testing and working with Containers or Virtual Machines
Experience with Agile Methodologies
Knowledge of Xacta
Ability to develop scripts, including Python, to test systems or automate security processes
Ability to reverse engineer applications to develop security tests
Bachelor's degree in Science, Technology, Engineering, or Mathematics
IAT or IAM Level III DoD 8570 Certification

Responsibilities

Evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements.
Assist in defining the organization’s preferred state and risk thresholds and analyze actual state information to assess compliance.
Work with leaders to codify strategic objectives into doctrine and procedures that can help meet defined objectives.
Assist with the evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed.
Recommend tools and capabilities based on research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements.
Work with clients to ensure standards are met with information assurance and security requirements.
Use the latest cloud technologies to secure customers’ environments.
Collaborate with cloud security experts.