Information Systems Security Engineer

Booz Allen Hamilton • Fort Belvoir, VA

104d • $77,600 - $176,000

About The Position

Are you looking for an opportunity to share your experience in system security engineering to help our country and assist our clients with critical missions? As a systems security and network security engineer, you can identify the Information System Security Engineering needed to assess vulnerabilities and recommend the best solution and security strategy. We need your experience to lead the development and implementation of security solutions that will protect our military. On our team, you'll troubleshoot and analyze complex challenges for customers using your knowledge of network and security devices, applications, and identifying tools. You'll use your curiosity for technology and market trends to further research and develop security solutions. Using your knowledge and experience in cybersecurity, you'll assess security threats and implement infrastructure controls. In this role, you'll closely impact the DoD by protecting their infrastructure. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect critical AI or ML networks for the better.

Requirements

• 6+ years of experience in an ISSE, ISSO, or IT role.
• Experience with DoD architecture, strategic planning, concept of operations, performance attributes, system architecture and design, evolving methodologies, and statutory and regulatory requirements.
• Experience with Security Information and Event Management (SIEM) systems such as Splunk, Elastic, Logstash, and Kibana.
• Experience with data broker technologies such as Cribl or Confluent, operating systems security events such as Windows or Linux, and networking protocols such as TCP / IP, DNS, DHCP, or HTTP / HTTPS.
• Experience with cybersecurity tools and technologies such as IDS / IPS, firewalls, host-based security, or Identity and Access Management (IDAM), and DevSecOps tools and practices such as CI / CD pipelines, including GitLab CI / CD and Azure DevOps.
• Experience with programming or scripting, including with PowerShell, Ansible, Python, and automation frameworks such as Ansible, Terraform, Puppet, or Chef.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• Bachelor's degree.
• IASAE II Certification such as CASP+, CISSP, or CSSLP Certification.

Nice To Haves

• Experience with ICAM principles and technologies such as multi-factor authentication and privileged access management.
• Experience with automation tools and scripting languages such as Python and PowerShell.
• Knowledge of Zero Trust principles and frameworks such as NIST 800-207.
• TS/SCI clearance with a polygraph.
• Offensive Security Certified Professional (OSCP), GIAC Certified Incident Handler (GCIH), or GIAC Vulnerability Assessment Professional (GVAP) Certification.

Responsibilities

• Design, develop, and implement automated workflows and integrations.
• Provide expertise of cybersecurity principles, practices, and technologies, and DevSecOps practices and tools, including CI / CD integration and containerization.
• Analyze security data to identify trends and improve security posture.
• Analyze complex security problems and develop creative solutions.
• Use IC policies and standards, INSCOM guidelines, and ZT / ICAM compliance frameworks.
• Document and report vulnerabilities, ensuring compliance and audit readiness.
• Use SIEM solutions and SOAR integration.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Recognition awards program for exceptional performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree