Cybersecurity Test Engineer, Junior

Booz Allen Hamilton•Rome, NY

20h•$55,200 - $126,000

About The Position

Collaborate with a team of creative problem solvers to test and evaluate systems through a Whitebox adversarial approach for the DoD in support of Air Force clients. Work with systems assessed against NIST 800-53 Risk Management Framework security controls. Focus on filtering capabilities and data flows, including low levels, within system architecture, including Mandatory Access Controls and Discretionary Access Controls. Build capabilities by learning from the expertise of the team. The position is located in Rome, New York, and is not listed as remote. A Secret clearance is required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. The role requires the ability to obtain a DoD IAT Level II Security+ CE Certification within 120 days of the start date. Booz Allen offers health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards. The projected annual compensation range is $55,200 to $126,000 USD. The position's work model is not explicitly identified as onsite, hybrid, or remote in the posting; it states that remote work is not available.

Requirements

Experience with the Linux command line, including scripting in Ruby, Python, or Bash and automating basic tasks.
Experience with networking concepts.
Experience with virtualization.
Secret clearance.
High school diploma or GED.
Ability to obtain a DoD IAT Level II Security+ CE Certification within 120 days of the start date.

Nice To Haves

Experience analyzing and executing test plans and procedures.
Experience developing or analyzing technical documentation.
Experience with penetration testing or adversarial emulation.
Experience with NIST 800-53 security controls.
Knowledge of cyber threats and how to harden a system to prevent them.
Knowledge of vulnerability assessment tools, including Kali Linux, Wireshark, Tripwire, Burp Suite, and Metasploit.
OSCP, CISSP, CASP, Red Hat CSA, or GPEN certification.

Responsibilities

Test and evaluate systems using a Whitebox adversarial approach for the DoD in support of Air Force clients.
Assess systems based on NIST 800-53 Risk Management Framework security controls.
Focus on system filtering capabilities and data flows, including low levels, within system architecture.
Examine Mandatory Access Controls and Discretionary Access Controls.
Develop capabilities by learning from the expertise of the team.