Cybersecurity and RMF Engineer, Mid

Booz Allen Hamilton•Arlington, VA

1d•Onsite

About The Position

This role offers an opportunity to leverage experience in cybersecurity and systems engineering to support the U.S. Air Force. As a systems security and network security engineer, the individual will identify tools for vulnerability assessment, recommend solutions and security strategies, and oversee the development and implementation of security solutions to protect military assets. The role involves supervising a team in troubleshooting and analyzing complex challenges, managing research into technology and market trends for security solutions, and assessing security threats and implementing infrastructure controls using expertise in low-code/no-code systems and security protocols. This position directly impacts Air Force human capital management by securing critical systems. The team environment emphasizes mentoring, hands-on problem-solving, and opportunities for learning new tools and skills to develop optimal customer solutions.

Requirements

2+ years of experience with RMF, NIST 800-53, Zero Trust, STIGs, vulnerability management, ATO packages, POA & Ms, continuous monitoring, or secure cloud
Experience in cybersecurity engineering and RMF alignment for the solution, supporting secure architecture, controls implementation, scanning, evidence generation, POA & M tracking, or continuous monitoring in IL5-ready environments with scalability to higher controls
Ability to work with development teams to select the most suitable controls
Secret clearance
Bachelor's degree

Nice To Haves

2+ years of experience setting up or working with DevSecOps pipeline security tools, scanning, and reporting
2+ years of experience supporting and helping configure in a DevOps team
Experience developing SSP or ATO packages for systems deployed in a Microsoft Azure, AWS, or DoD cloud environment
Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Service Provider Certification
DoD 8570 IAM II Certification such as SecurityX, CISM, or CISSP Certification
DoD 8570 IASAE Level III Certification such as CISSP-ISSAP, CISSP-ISSEP, or CCSP Certification

Responsibilities

Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
Lead risk and vulnerability assessments in network, system, and application areas.
Leverage big data analytics and traditional security event types to identify advanced threats.