Enterprise Cybersecurity Automation Engineer

Booz Allen Hamilton•McLean, VA

1d•$86,800 - $198,000•Hybrid

About The Position

Play a key role as part of the Booz Allen corporate Enterprise Cybersecurity (ECS) division. Use established and new tools to integrate and automate tasks to improve the efficiency of ECS teams. You’ll manage and maintain existing integrations, automation, workflows, and documentation while working to expand into areas that have not been optimized. You’ll use knowledge of Python scripting and Application Programming Interfaces (APIs) to integrate security systems into the existing SOAR Platform. You’ll be responsible for feature requests, bug support, and provide technical engineering services in support of automating and orchestrating the company's security systems and solutions. Directly support the cybersecurity operations teams to capture requirements to design, develop, and support the company's automation solutions that will ensure maximized operational efficiency in support of the cyber mission.

Requirements

4+ years of experience with programming using Python, REST APIs, and SOAP APIs
3+ years of experience with network and system management tools, including security management tools such as Splunk, Carbon Black, CrowdStrike, Nitro, or ArcSight
3+ years of experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms, including Swimlane, Phantom, ServiceNow, Tines, or Demisto
Experience with security operations, incident response, threat management, or security engineering
Experience using cloud provider services, including AWS, Azure, or Google Cloud
Ability to obtain a Secret clearance
Bachelor's degree

Nice To Haves

Experience with log management platforms such as Splunk, Elasticsearch, Logstash, Kibana - ELK, and Elastic Stack
Experience with container services, including Docker and Kubernetes
Experience with Linux administration

Responsibilities

Manage and maintain existing integrations, automation, workflows, and documentation.
Expand into areas that have not been optimized.
Use knowledge of Python scripting and Application Programming Interfaces (APIs) to integrate security systems into the existing SOAR Platform.
Be responsible for feature requests, bug support, and provide technical engineering services in support of automating and orchestrating the company's security systems and solutions.
Directly support the cybersecurity operations teams to capture requirements to design, develop, and support the company's automation solutions that will ensure maximized operational efficiency in support of the cyber mission.
Create and execute test plans for new integrations and automation.
Identify and address areas where automation can be improved by either refactoring, building, or adopting new tooling and technologies.
Develop innovative solutions to improve customer experiences and rapidly prototype and test solutions with production-level quality.