Enterprise Data Cybersecurity Engineer, Lead

Booz Allen Hamilton•McLean, VA

3d•$112,800 - $257,000

About The Position

Principally responsible for Booz Allen Hamilton’s data cybersecurity solution design, strategy, and effectiveness. The role helps shape the company’s worldwide data cybersecurity capabilities by collaborating with cross-functional teams on a business-wide converged technological security strategy. This strategy will inform the security roadmap for the data cybersecurity stack, data protection programs, and go-to-market platform protection models. The position is accountable for the data cyber solution stack, ensuring data protection controls are appropriately configured and continually reducing data cybersecurity risk. It ensures data platforms—including cloud data platforms, data lakes, databases, and storage systems—and their configurations across production, test, and extended enterprise environments meet Booz Allen Hamilton security standards. The role analyzes and promotes configuration policy changes with data engineering and platform teams, monitors compliance, performs regular assessments to identify and remediate deviations, and works with stakeholders to promote a strong data security culture. The role originates, facilitates, and leads IT and security teams’ efforts to deploy and maintain data protection solutions. It ensures controls such as encryption, tokenization, masking, and key management are properly implemented, and partners with cyber threat and security operations teams to drive threat-informed data protection strategies. It also coordinates response and defensive actions across security disciplines and disseminates technical information in support of critical business, go-to-market, and operational infrastructure needs. The position is located in McLean, Virginia.

Requirements

7+ years of experience managing data platforms or data-centric IT solutions, including databases, data lakes, and cloud data environments.
3+ years of experience with cybersecurity solutions such as encryption, key management, data loss prevention, data classification, structured and unstructured data security, database security, data storage protection, and data lifecycle management.
Knowledge of cloud-native data architectures and security controls, including AWS, Azure, or GCP data services and associated data access models and governance controls.
Knowledge of modern encryption standards, key management systems, and emerging technologies such as quantum-resistant cryptography.
Knowledge of data-centric cyber threats, including data exfiltration, insider threats, ransomware, and advanced persistent threats targeting sensitive data.
Knowledge of security incident handling, data risk posture measurement, change management, data governance, policy enforcement, and regulatory compliance.
Ability to integrate disparate data security solutions across system, network, application, and cloud architectures, including through APIs and native cloud services.
Ability to engage and collaborate credibly with technologists and leaders across the enterprise.
Ability to obtain a Secret clearance.
Bachelor’s degree.

Nice To Haves

Experience with programming or scripting languages used in data environments, such as Python or SQL.
Experience with data governance frameworks, data classification standards, and privacy regulations, including GDPR and CCPA.
Knowledge of database structures, data modeling, and query optimization, including SQL and NoSQL platforms.
Knowledge of applying artificial intelligence in data security and anomaly detection.
Ability to design, deploy, and maintain data security solutions in enterprise-scale environments with large volumes of sensitive and regulated data.
IT engineering or security certifications, such as CISSP, CCSP, CDPSE, or cloud security certifications.

Responsibilities

Shape Booz Allen Hamilton’s worldwide data cybersecurity capabilities and contribute to a business-wide technological security strategy and future security roadmap.
Manage the data cybersecurity solution stack and ensure data protection controls are configured appropriately to reduce cybersecurity risk.
Ensure cloud data platforms, data lakes, databases, and storage systems meet security standards across production, test, and extended enterprise environments.
Partner with data engineering and platform teams to analyze and promote configuration policy changes.
Monitor compliance and conduct regular assessments to identify and remediate configuration deviations.
Work with stakeholders to promote a strong data security culture.
Lead IT and security teams’ deployment and maintenance of data protection solutions.
Ensure encryption, tokenization, masking, and key management controls are implemented appropriately.
Partner with cyber threat and security operations teams to develop threat-informed data protection strategies.
Coordinate response and defensive actions across security disciplines and communicate technical information in support of business and operational needs.