Information System Security Engineer

Booz Allen Hamilton•San Antonio, TX

9d•$99,000 - $225,000

About The Position

Information System Security Engineer Key Role: Implement and manage policies and procedures to ensure database and sof tware security. Apply leading-edge principles, theories, and concepts and contribute to the development of new principles and concepts. Work on unusually complex problems and provide highly innovative solutions. Operate with substantial latitude for unreviewed action or decision. Mentor or supervise employees in both company and technical competencies.

Requirements

10+ years of experience in an ISSE, ISSO, or IT role
3+ years of experience developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans
3+ years of experience with security architecture evaluations, guidance development, and troubleshooting
3+ years of experience working with cloud service provider s, including Amazon Web Services (AWS) or Micro sof t Azure
Experience managing security applications within a cloud service provider , including AWS, Micro sof t Azure, or Google Cloud
Experience with the NIST RMF and NIST SP 800-53 security and privacy controls, FISMA, and FEDRAMP
Experience with SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC tools
TS / SCI clearance
Bachelor’s degree and 3+ years of experience with cyber or IA, or 7+ years of experience with cyber or IA in lieu of a degree
DoD 8140 baseline Level II Certification such as Security+, CySA+, CISSP, or DoD Cyber Workforce Framework Certification
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; TS/SCI clearance is required.

Nice To Haves

Experience using cloud services or security applications to generate reports to c ond uct security analysis of processes and platforms
Experience configuring and managing tools for security monitoring, compliance tracking, and availability within cloud environments
Experience with the sof tware development life cycle ( SDLC ) or DevSecOps
Experience working with security applications to c ond uct enterprise vulnerability scanning
Experience c ond ucting penetration testing, and working with containers or virtual machines
Experience with SIEMS such as Splunk or ArcSight
Experience with HBSS or Trellix
Knowledge of Xacta
Ability to develop scripts, including in Python, to test systems or automate security processes
Ability to reverse engineer applications to develop security tests

Responsibilities

Implement and manage policies and procedures to ensure database and sof tware security.
Apply leading-edge principles, theories, and concepts and contribute to the development of new principles and concepts.
Work on unusually complex problems and provide highly innovative solutions.
Operate with substantial latitude for unreviewed action or decision.
Mentor or supervise employees in both company and technical competencies.