Cloud Security Engineer, Senior

Booz Allen Hamilton•Washington, DC

3d•$99,000 - $225,000•Onsite

About The Position

As a hands-on security engineer on our team, you’ll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements. You'll assist in defining an organizations’ desired state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You’ll recommend tools and capabilities based on your research of the current environment and knowledge of various on-premises, cloud-based, and hybrid resources to address security requirements. You will implement the cloud security architectures, tools, and processes that you helped to shape and define. Your technical experience will be vital as you work with IC clients to ensure standards are met with security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment while collaborating with tomorrow’s cloud security experts. This position is located in Reston, Virginia.

Requirements

7+ years of experience building and administering cloud environments, utilizing cloud-native functionality and COTs, GOTS, and open-source tools to meet your objectives
Experience developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans
Experience with security architecture evaluations, guidance development, and troubleshooting
Experience with Risk Management Framework (RMF)
Experience working in an Agile development environment
Knowledge of infrastructure code concepts such as Terraform, CloudFormation, or Bicep
Active TS/SCI clearance; willingness to take a polygraph exam
Associate’s degree and 10+ years of experience supporting IT projects and activities, Bachelor’s degree and 8+ years of experience supporting IT projects and activities, or Master’s degree and 6+ years of experience supporting IT projects and activities
Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP Certification, within 30 days of start date
Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date

Nice To Haves

Experience with the software development life cycle (SDLC)
Experience with cloud technologies
Possession of excellent team leadership, development, and client relationship skills
Possession of excellent interpersonal skills
Possession of excellent verbal and written communication skills

Responsibilities

Evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements.
Assist in defining an organization’s desired state and risk thresholds and analyze actual state information to assess compliance.
Work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives.
Assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed.
Recommend tools and capabilities based on research of the current environment and knowledge of various on-premises, cloud-based, and hybrid resources to address security requirements.
Implement the cloud security architectures, tools, and processes that you helped to shape and define.
Work with IC clients to ensure standards are met with security requirements.
Use the latest cloud technologies to secure your customer’s environment while collaborating with tomorrow’s cloud security experts.