Cybersecurity Engineer and Risk Analyst

Booz Allen Hamilton•San Diego, CA

5h•$61,900 - $141,000•Onsite

About The Position

Booz Allen is seeking a Cybersecurity Engineer and Risk Analyst to develop and implement security solutions that safeguard military systems and missions. The role applies systems and network security engineering, cybersecurity policy, risk management, and Risk Management Framework (RMF) expertise to identify vulnerabilities, assess threats, and implement infrastructure controls. The position supports Navy missions by identifying cyber risks and providing hands-on cybersecurity support to critical mission areas. The successful candidate will troubleshoot and analyze complex customer challenges, research technology and market trends, and communicate security concepts to technical and non-technical audiences, including senior management. The position is onsite in San Diego, California; remote work is not listed for this role.

Requirements

At least 3 years of experience working with IT systems for a DoD or government agency.
Experience working with the Risk Management Framework (RMF).
Experience with security controls or policies, compliance, vulnerability analysis, or remediation for networks, systems, or communications protocols.
Knowledge of operating systems, platforms, and technologies, including Windows, Linux, cloud, or virtualization.
Knowledge of eMASS and package workflows, including assisting with security policies, evaluating assessment documentation, and developing written security risks, mitigations, and recommendations.
Ability to devise and execute client deliverables, work independently, identify problems and develop solutions, communicate results to technical and non-technical audiences, and lead client tasks from inception to completion.
Ability to plan, implement, upgrade, or monitor cybersecurity measures to improve cyber defenses and maintain a cyber-resilient network.
Secret clearance required.
High school diploma or GED.
DoD 8140 certification.

Nice To Haves

Experience with Assured Compliance Assessment Solution (ACAS), DoD Security Technical Implementation Guides (STIG), and Evaluate-STIG.
Experience integrating security into DevOps or DevSecOps pipelines.
Experience implementing automation methodologies and processes.
Experience deploying, implementing, maintaining, and integrating cybersecurity tools and applications in alignment with the current threat landscape, and analyzing risks and opportunities at tactical and strategic levels.
Experience with network engineering functions and Windows, Linux, and virtual operating systems; security tools and platforms such as network and web application firewalls, web proxy, intrusion prevention systems, vulnerability scanners, and penetration tools.
Experience responding to computer security breaches, re-establishing protections, and making required reports.
Ability to meet cyber schedule, performance, and quality metrics within the systems development lifecycle and acquisition lifecycle.
TS/SCI clearance.
Bachelor's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics.
OS certification.

Responsibilities

Build relationships and communicate security complexities to a variety of audiences, including senior management.
Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
Perform risk and vulnerability assessments across network, system, and application areas.
Use big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
Develop and implement security solutions and infrastructure controls to protect military systems and missions.
Plan, implement, upgrade, or monitor cybersecurity measures to improve cyber defenses and maintain a cyber-resilient network.
Create client deliverables, analyze problems, devise solutions, communicate results, and lead client tasks from inception to completion.