Cloud Security Engineer

Booz Allen Hamilton•Beavercreek, OH

17d

About The Position

Develop and implement cloud-based security architectures for Sit(x), a Booz Allen product, supporting mission-critical public safety communications and situational awareness systems. Define, communicate, and implement security architecture; recommend tools and capabilities based on research of customer environments and knowledge of on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) requirements. Work with developers to ensure information assurance and security standards are met, use current cloud technologies to secure customer environments, and mentor cloud security professionals. The role focuses on AWS cloud security and strengthening the security of tactical communications networks.

Requirements

At least 5 years of experience building and administering cloud environments and using cloud-native functionality, COTs, GOTs, and open-source tools to meet objectives.
Experience with security architecture evaluations, guidance development, and troubleshooting.
Experience with the Risk Management Framework (RMF).
Experience with AWS infrastructure, IAM, VPC networking, security controls, and troubleshooting.
Experience implementing STIGs, Linux security hardening, and building and maintaining custom STIG-hardened AMIs.
Experience with Splunk or AWS-native OpenSearch-based security analytics, centralized logging, threat detection, and integration with AWS security services such as Security Hub, GuardDuty, and CloudTrail.
Experience with POA&Ms, vulnerability management and remediation, security documentation, continuous monitoring, and improving overall security posture.
Bachelor's degree in Computer Science.

Nice To Haves

Experience with the software development life cycle (SDLC).
Experience with cloud technologies.
Knowledge of multicloud governance and automation in AWS, Google Cloud, Microsoft Azure, Oracle Cloud, or other cloud providers.
Excellent interpersonal skills.
Excellent verbal and written communication skills.
DoD 8570 IAT Level III certification, such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP.
DoD 8570 Cybersecurity Service Provider-Infrastructure Support (CSSP-IS) certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.

Responsibilities

Define, communicate, and implement security architecture for mission-critical operations.
Research the current environment and recommend tools and capabilities to address RMF requirements across on-premises, cloud-based, and hybrid resources.
Work with developers to ensure information assurance and security requirements are met.
Evaluate security architectures, develop guidance, and troubleshoot issues.
Build and administer cloud environments using cloud-native functionality, commercial off-the-shelf, government off-the-shelf, and open-source tools.
Implement AWS infrastructure security, including IAM, VPC networking, security controls, and troubleshooting.
Implement STIGs, harden Linux systems, and build and maintain custom STIG-hardened AMIs.
Support security analytics, centralized logging, threat detection, and integration with AWS security services.
Manage POA&Ms, vulnerability remediation, security documentation, and continuous monitoring to improve security posture.
Mentor cloud security professionals.