Cybersecurity Engineer and Risk Analyst

Booz Allen Hamilton • San Diego, CA

1d • $69,300 - $158,000

About The Position

As a Cybersecurity Engineer and Risk Analyst, you will help safeguard military missions by identifying security tools, applications, and systems; assessing vulnerabilities; and recommending security solutions and strategies. You will troubleshoot complex customer challenges using knowledge of cybersecurity policy, networks, system infrastructure, and risk management. The role includes researching technology and market trends, assessing security threats, and implementing infrastructure controls using experience with ACAS, STIGing, and scanning.

You will champion cybersecurity for Navy missions, identify cyber risks, and provide hands-on support to critical mission areas. You will work with other teams and communicate security topics to audiences ranging from technical staff to senior management. The work includes implementing controls, improving detection and event correlation in large enterprises, conducting risk and vulnerability assessments, and using security event data and analytics to identify advanced threats or indicators of compromise.

The position requires a Secret clearance, a high school diploma or GED, and a DoD 8140 Certification. Booz Allen describes a benefits package that includes health, life, disability, financial, and retirement benefits; paid leave; professional development; tuition assistance; work-life programs; dependent care; and recognition awards. The projected annual compensation range is $69,300 to $158,000.

Requirements

• At least 4 years of experience working with Information Technology systems for a DoD or government agency.
• At least 4 years of experience leading Risk Management Framework activities, including Assessment and Authorization activities and preparation, direct development, and maintenance of RMF artifacts, packages, and deliverables across all steps, including Security Assessment Plans.
• At least 3 years of experience implementing security controls and policies, performing cybersecurity compliance testing using industry-standard tools, and performing vulnerability analysis and remediation of networks, systems, and communications protocols.
• Experience with architecture visualization and developing and maintaining system artifacts, including Boundary Diagrams and Data Flow Diagrams.
• Experience with eMASS, including security plan development and hands-on package processing through workflows, assisting with security policies, evaluating assessment documentation, and developing written security risks, mitigations, and recommendations.
• Ability to devise and execute client deliverables, work independently, identify problems and devise analysis and solutions, communicate results to technical and non-technical audiences, and lead client tasks from inception to completion.
• Secret clearance.
• High school diploma or GED.
• DoD 8140 Certification.

Nice To Haves

• Experience with Assured Compliance Assessment Solution (ACAS), DoD STIG, and Evaluate-STIG.
• Experience deploying, implementing, maintaining, and integrating cybersecurity tools and applications in alignment with the current threat landscape, and analyzing risks and opportunities at tactical and strategic levels.
• Experience with network engineering functions involving Windows, Linux, and virtual operating systems, and security tools and technologies such as network and web application firewalls, web proxy, intrusion prevention systems, vulnerability scanners, and penetration tools.
• Ability to meet cyber schedules, performance, and quality metrics within the systems development lifecycle and acquisitions lifecycle.

Responsibilities

• Develop relationships with other teams and communicate security complexities to a wide range of audiences, including senior management.
• Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Perform risk and vulnerability assessments across network, system, and application areas.
• Use big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Assess security threats and implement infrastructure controls.
• Prepare, develop, and maintain Risk Management Framework artifacts, packages, and deliverables across all RMF steps, including Security Assessment Plans.
• Perform cybersecurity compliance testing and vulnerability analysis and remediation.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED