Cybersecurity and RMF Engineer, Mid

Booz Allen Hamilton•Arlington, VA

1d•$69,400 - $158,000

About The Position

This role offers an opportunity to leverage experience in cybersecurity and systems engineering to support the U.S. Air Force. As a systems security and network security engineer, the individual will identify tools for vulnerability assessment, recommend solutions, and develop security strategies. The role involves overseeing the development and implementation of security solutions to protect military assets. The team member will supervise a team, troubleshoot complex customer challenges using knowledge of network and security devices, applications, and identifying tools. Responsibilities include managing research of technology and market trends to develop security solutions, assessing security threats, and implementing infrastructure controls using expertise in low-code/no-code systems and security protocols. This position directly impacts Air Force human capital management by securing human capital systems. The team focuses on growth through mentoring, challenging problem-solving, and opportunities to learn new tools and skills to create optimal customer solutions.

Requirements

2+ years of experience with RMF, NIST 800-53, Zero Trust, STIGs, vulnerability management, ATO packages, POA&Ms, continuous monitoring, or secure cloud
2+ years of experience as an Information Systems Security Officer (ISSO), Information Systems Security Engineer (ISSE), or Information Systems Security Manager (ISSM)
Experience in cybersecurity engineering and RMF alignment, supporting secure architecture, controls implementation, scanning, evidence generation, POA&M tracking, and continuous monitoring in IL5-ready environments with scalability to higher controls
Ability to work with development teams to select the most suitable controls
Secret clearance
Bachelor's degree

Nice To Haves

2+ years of experience setting up or working with DevSecOps pipeline security tools, scanning, and reporting
2+ years of experience supporting and helping configure a DevOps team
Experience developing SSP or ATO packages for systems deployed in a Microsoft Azure, AWS, or DoD cloud environment
Amazon Web Service (AWS), Microsoft Azure, or Google Cloud Service Provider Certification
DoD 8570 IAM II Certification such as SecurityX, CISM, or CISSP Certification
DoD 8570 IASAE Level III Certification such as CISSP-ISSAP, CISSP-ISSEP, or CCSP Certification

Responsibilities

Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
Lead risk and vulnerability assessments in network, system, and application areas.
Leverage big data analytics and traditional security event types to identify advanced threats.