Cloud Security Engineer
About The Position
Booz Allen is seeking a Cloud Security Engineer to define, communicate, and implement security architecture supporting mission-critical operations for Sit(x), a Booz Allen product. The role focuses on securing cloud-based applications and systems used for public safety communications and situational awareness. The engineer will assess and implement security requirements, recommend tools and capabilities based on research of on-premise, cloud-based, and hybrid environments, and address Risk Management Framework (RMF) requirements. They will work with developers to ensure information assurance and security standards are met, apply cloud security technologies in AWS, and help mentor future cloud security experts. The listed work model is hybrid, with work performed at a Booz Allen or customer facility in alignment with leadership expectations and role needs.
Requirements
- 5+ years of experience building and administering cloud environments and using cloud-native functionality, COTs, GOTs, and open-source tools to meet objectives.
- Experience with security architecture evaluations, guidance development, and troubleshooting.
- Experience with the Risk Management Framework (RMF).
- Experience with AWS infrastructure, IAM, VPC networking, security controls, and troubleshooting.
- Experience implementing STIGs, Linux security hardening, and building and maintaining custom STIG-hardened AMIs.
- Experience with Splunk or AWS-native OpenSearch-based security analytics, centralized logging, threat detection, and integration with AWS security services such as Security Hub, GuardDuty, and CloudTrail.
- Experience with POA&Ms, vulnerability management and remediation, security documentation, continuous monitoring, and improving overall security posture.
- Bachelor's degree in Computer Science.
Nice To Haves
- Experience with the software development life cycle (SDLC).
- Experience with cloud technologies.
- Knowledge of multicloud governance and automation in Amazon Web Services, Google Cloud Product, Microsoft Azure, Oracle Cloud, or other cloud providers.
- Excellent interpersonal skills.
- Excellent verbal and written communication skills.
- DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP Certification.
- DoD 8570 Cybersecurity Service Provider-Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification.
Responsibilities
- Define, communicate, and implement security architecture for mission-critical operations supporting Sit(x).
- Assess and implement requirements that protect information systems against intentional or inadvertent access or destruction.
- Research the current environment and recommend tools and capabilities across on-premise, cloud-based, and hybrid resources to address RMF requirements.
- Work with developers to ensure information assurance and security requirements are met.
- Secure customer environments using cloud technologies, including AWS.
- Mentor cloud security experts.
Benefits
- Health, life, and disability benefits.
- Financial and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
