Cloud Security Engineer

Booz Allen Hamilton•Dayton, OH

1d•$86,800 - $198,000

About The Position

As a cloud security architect supporting Sit(x), a Booz Allen product, you will define, communicate, and implement security architecture for mission-critical operations. You will research existing environments and recommend tools and capabilities across on-premise, cloud-based, and hybrid resources to address Risk Management Framework (RMF) requirements. You will work with developers to ensure information assurance and security standards are met, with a focus on securing AWS environments and cloud-based applications supporting public safety communications and situational awareness. The role also includes mentoring developing cloud security professionals.

Requirements

At least 5 years of experience building and administering cloud environments and using cloud-native functionality, commercial off-the-shelf (COTS), government off-the-shelf (GOTS), and open-source tools to meet objectives.
Experience with security architecture evaluations, guidance development, and troubleshooting.
Experience with the Risk Management Framework (RMF).
Experience with AWS infrastructure, IAM, VPC networking, security controls, and troubleshooting.
Experience implementing STIGs and Linux security hardening, and building and maintaining custom STIG-hardened AMIs.
Experience with Splunk or AWS-native OpenSearch-based security analytics, centralized logging, threat detection, and integration with AWS security services such as Security Hub, GuardDuty, and CloudTrail.
Experience with POA&Ms, vulnerability management and remediation, security documentation, continuous monitoring, and improving overall security posture.
Bachelor’s degree in Computer Science.

Nice To Haves

Experience with the software development life cycle (SDLC).
Experience with cloud technologies.
Knowledge of multicloud governance and automation in Amazon Web Services, Google Cloud Product, Microsoft Azure, Oracle Cloud, or other cloud providers.
Excellent interpersonal skills.
Excellent verbal and written communication skills.
DoD 8570 IAT Level III certification, such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP.
DoD 8570 Cybersecurity Service Provider-Infrastructure Support (CSSP-IS) certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.

Responsibilities

Define, communicate, and implement security architecture for mission-critical operations.
Research the current environment and recommend tools and capabilities across on-premise, cloud-based, and hybrid resources to address RMF requirements.
Work with developers to ensure information assurance and security requirements are met.
Identify ways to secure the customer’s environment using cloud technologies, particularly AWS.
Mentor cloud security professionals.