Cybersecurity Engineer and Risk Analyst

Booz Allen Hamilton•San Diego, CA

17h•$69,300 - $158,000•Remote

About The Position

This role offers an opportunity to advance experience in cybersecurity and security engineering to safeguard the nation. As a systems security and network security engineer, the individual will identify tools, applications, and systems needed to assess vulnerabilities and recommend the best solution and security strategy to protect military assets. The role involves troubleshooting and analyzing complex challenges using knowledge of cybersecurity policy, networks, system infrastructure, and risk management. It also requires research and development of security solutions based on technology and market trends, and the assessment of security threats and implementation of infrastructure controls using ACAS, STIGing, and scanning. The position closely impacts Navy missions by championing cybersecurity, discovering cyber risks, and providing hands-on support to critical mission areas, with a focus on team growth and developing optimal customer solutions.

Requirements

3+ years of experience leading Risk Management Framework (RMF) activities for DoD or DoW projects, including creating and maintaining artifacts
Experience performing vulnerability and compliance scanning, device configuration, and network monitoring using industry-standard tools and performing remediation
Experience implementing security controls and policies, patching, and configuration management
Experience using eMASS, including processing packages through workflows, evaluating assessment documentation, and developing written security risks, mitigations, and recommendations
Ability to develop deliverables and solutions, communicate results to both technical and non-technical audiences, and independently lead the accomplishments of client tasks from inception to completion
Secret clearance
Bachelor's degree
DoD 8140 Certification

Nice To Haves

Experience with Operating System administration for Windows and Linux
Experience integrating security into DevOps or DevSecOps pipelines
Experience implementing automation methodologies and processes
Experience with architecture visualization and the development and maintenance of system artifacts, including Boundary Diagrams and Data Flow Diagrams
Experience with analyzing cyber risks and opportunities in alignment with the current threat landscape and providing recommended solutions
Experience with network engineering and the associated security tools, such as firewalls, web proxies, intrusion prevention systems, and penetration tools
Ability to meet cyber schedule, performance, and quality metrics within the systems development lifecycle and acquisition lifecycle
Top Secret clearance
Master’s degree
OS Certification

Responsibilities

Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities, and improved event correlation in large enterprises.
Perform risk and vulnerability assessments in network, system, and application areas.
Leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.