Information System Security Engineer

Booz Allen Hamilton•San Antonio, TX

41d•$99,000 - $225,000

About The Position

Information System Security Engineer Key Role: Implement and manage policies and procedures to ensure database and software security. Apply leading-edge principles, theories, and concepts and contribute to the development of new principles and concepts. Work on unusually complex problems and provide highly innovative solutions. Operate with substantial latitude for unreviewed action or decision. Mentor or supervise employees in both company and technical competencies.

Requirements

10+ years of experience in an ISSE, ISSO, or IT role
3+ years of experience developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans
3+ years of experience with security architecture evaluations, guidance development, and troubleshooting
3+ years of experience working with cloud service providers, including Amazon Web Services (AWS) or Microsoft Azure
Experience managing security applications within a cloud service provider, including AWS, Microsoft Azure, or Google Cloud
Experience with the NIST RMF and NIST SP 800-53 security and privacy controls, FISMA, and FEDRAMP
Experience with SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC tools
TS/SCI clearance
Bachelor’s degree and 3+ years of experience with cyber or IA, or 7+ years of experience with cyber or IA in lieu of a degree
DoD 8140 baseline Level II Certification such as Security+, CySA+, CISSP, or DoD Cyber Workforce Framework Certification

Nice To Haves

Experience using cloud services or security applications to generate reports to conduct security analysis of processes and platforms
Experience configuring and managing tools for security monitoring, compliance tracking, and availability within cloud environments
Experience with the software development life cycle (SDLC) or DevSecOps
Experience working with security applications to conduct enterprise vulnerability scanning
Experience conducting penetration testing, and working with containers or virtual machines
Experience with SIEMS such as Splunk or ArcSight
Experience with HBSS or Trellix
Knowledge of Xacta
Ability to develop scripts, including in Python, to test systems or automate security processes
Ability to reverse engineer applications to develop security tests

Responsibilities

Implement and manage policies and procedures to ensure database and software security
Apply leading-edge principles, theories, and concepts and contribute to the development of new principles and concepts
Work on unusually complex problems and provide highly innovative solutions
Operate with substantial latitude for unreviewed action or decision
Mentor or supervise employees in both company and technical competencies