Cloud Cybersecurity Engineer

Booz Allen Hamilton•Rome, NY

8d•$61,900 - $141,000•Remote

About The Position

As a cybersecurity engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. This role involves developing cloud-based security solutions for critical systems within the Intelligence Community (IC). You will evaluate and support documentation, validation, assessment, and accreditation processes to ensure IT systems meet Information Assurance (IA) and security requirements. This includes assisting in defining the organization’s preferred state and risk thresholds, analyzing actual state information for compliance, and working with leaders to codify strategic objectives into doctrine and procedures. You will also assist with the evaluation of computer applications, software, or specialized utility programs to ensure software assurance best practices are followed and recommend tools and capabilities based on research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements. Your technical experience will be vital in ensuring clients meet information assurance and security requirements. This is an opportunity to use the latest cloud technologies to secure customer environments while collaborating with other cloud security experts.

Requirements

1+ years of experience developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans
1+ years of experience with security architecture evaluations, guidance development, and troubleshooting
1+ years of experience working with cloud service providers, including Amazon Web Services or Microsoft Azure
Knowledge of the NIST RMF and NIST SP 800-53 Security and Privacy Controls, FISMA, or FEDRAMP
Ability to use SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC Tools
Ability to manage security applications within a Cloud Service Provider, including Amazon Web Services (AWS), Microsoft Azure, or Google Cloud
Ability to use cloud services or security applications to generate reports to conduct security analysis of processes and platforms
Top Secret clearance
HS diploma or GED
IAT or IAM Level II DoD 8570 Certification

Nice To Haves

5+ years of experience in Cybersecurity
Experience with the software development life cycle (SDLC) or DevSecOps
Experience working with security applications to conduct enterprise vulnerability scanning
Experience conducting penetration testing and working with Containers or Virtual Machines
Experience with Agile Methodologies
Knowledge of Xacta
Ability to develop scripts, including Python, to test systems or automate security processes
Ability to reverse engineer applications to develop security tests
Bachelor's degree in Science, Technology, Engineering, or Mathematics
IAT or IAM Level III DoD 8570 Certification

Responsibilities

Evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements.
Assist in defining the organization’s preferred state and risk thresholds and analyze actual state information to assess compliance.
Work with leaders to codify strategic objectives into doctrine and procedures that can help meet defined objectives.
Assist with the evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed.
Recommend tools and capabilities based on research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements.
Work with clients to ensure standards are met with information assurance and security requirements.