Information Systems Security Engineer

Booz Allen Hamilton•Warner Robins, GA

1d•$99,000 - $225,000•Onsite

About The Position

The Information Systems Security Engineer will ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration. They will coordinate changes or modifications with the appropriate Information System Security Manager (ISSM) and implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation. The role involves documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Operate (IATO) and Authority to Operate (ATO). The position supports DoD and military clients in developing cutting-edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies. The engineer will assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective, working with minimal supervision within established procedures and practices. The company focuses on growing as a team to make the best solutions for customers through mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills. The role involves securing and protecting critical AI/ML networks for vital client missions and operations.

Requirements

3+ years of experience with guiding a client through the entire Risk Management Framework (RMF) and Authority to Operate (ATO) process
Experience working as an Information System Security Engineer (ISSE), Information System Security Officer (ISSO), or a role in Information Technology, Cybersecurity, or IT Service Management
Experience in conducting enterprise vulnerability scanning using security applications such as ACAS, performing risk remediation efforts, conducting security control assessments, and integrating security principles to ensure compliance with DoD directives, and Security Technical Implementation Guides (STIGs)
Experience with achieving system certification, accreditation, assessment, and authorization, including IATT and ATOs
Experience in engineering, implementation, and hardening robust security solutions, including firewalls, Intrusion Detection and Prevention System (IDS/IPS), and Security Information and Event Management (SIEM) tools to defend against emerging threats
Knowledge of the systems and software engineering management process and its implementation, as applied to DoD acquisition processes throughout all life cycle phases
Knowledge of DoD communication, cybersecurity, and IT systems
TS/SCI clearance
Associate's degree and 7+ years with Cybersecurity, Bachelor’s degree and 3+ years of experience with Cybersecurity, or 9+ years of experience in Cybersecurity in lieu of degree
DoD 8140 IAT Level II Certification

Nice To Haves

Experience with DevSecOps
Experience with Cloud technologies and environments such as AWS
Experience with Agile methodologies
Experience with Operating Systems, including Linux, UNIX, Ubuntu, or Red Hat
Ability to apply Cybersecurity engineering methods to solution development life cycle activities
Ability to research emerging technology and apply it to cutting-edge problems
Possession of excellent presentation and collaboration skills
Master's degree in Computer Science or Cybersecurity
CISSP-ISSEP, CCSP, or CISM Certification

Responsibilities

Ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration.
Coordinate changes or modifications with the appropriate Information System Security Manager (ISSM).
Implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation.
Document, monitor, update, and manage systems to maintain an acceptable security posture and to achieve an Interim Authority to Operate (IATO) and Authority to Operate (ATO).
Support DoD and military clients in developing cutting-edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies.
Assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective.
Work with minimal supervision within established procedures and practices.
Secure and protect critical AI/ML networks for vital client missions and operations.