Information Systems Security Engineer

Booz Allen Hamilton • Herndon, VA

3d • $99,000 - $225,000

About The Position

The Information Systems Security Engineer will lead the development and implementation of security solutions for a U.S. government client supporting cyber operations. The role uses security engineering, cloud security, enterprise risk management, network scanning tools, security control frameworks, and cybersecurity practices for containerized environments. The engineer assesses security threats and implements infrastructure controls using containerization, Kubernetes, Amazon Web Services, and other cloud methodologies.

The position supports network security and cybersecurity hygiene for a government client with a high operational tempo. It involves implementing infrastructure and cybersecurity controls, strengthening detection and vulnerability capabilities, improving event correlation, performing risk and vulnerability assessments, and identifying advanced threats through security event analysis and big data analytics. The engineer collaborates with other teams and communicates security topics to audiences including senior management.

Requirements

• At least 5 years of experience with network Security Control Frameworks supporting accreditation and cybersecurity standards.
• At least 5 years of experience using and applying the National Institute for Standards and Technology (NIST).
• Knowledge of technology security controls and the network accreditation process.
• TS/SCI clearance with a polygraph.
• High school diploma or GED.

Nice To Haves

• Experience with cloud networking providers, including Amazon Web Services (AWS), Oracle, Microsoft, or Google.
• Experience with scanning tools, including Nessus, Rapid7, or Nipper.
• Experience monitoring and assessing risk on Plans of Action and Milestones (POA&M) items.
• Experience analyzing scans, including NMAP, vulnerability, and scan results.

Responsibilities

• Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Perform risk and vulnerability assessments in network, system, and application areas.
• Use big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Collaborate frequently with other teams, develop relationships, and communicate security complexities to varied audiences, including senior management.
• Develop and implement security solutions for a U.S. government client.
• Assess security threats and implement infrastructure controls using containerization, Kubernetes, AWS, and other cloud methodologies.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards program for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED