Information Systems Security Engineer

Booz Allen Hamilton•Fayetteville, NC

20h•$99,000 - $225,000

About The Position

Information Systems Security Engineer The Opportunity: Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to the Department of War (DoW). In all of this “cyber noise”, how can these organizations understand their risks and how to mitigate them? The answer is an Information Systems Security Engineer like you who can break down complex threats into manageable plans of action. That’s why we need you, an Information Systems Security Engineer who understands what “No-Fail” means. You operate with extreme ownership and demonstrate full accountability for outcomes, proactively identifying problems, driving solutions, and ensuring completion without reliance on external direction. You take personal responsibility for mission success, team performance, and deliverable quality, owning both successes and failures. You’ll anticipate risks, remove obstacles, and act decisively to close gaps before they impact schedule, cost, or performance. You’ll operate with a “no excuses” mindset while maintaining professional humility and continuous improvement. Elevate team effectiveness by taking initiative beyond assigned responsibilities to support mission objectives. Work with us as we protect our nation's cyber infrastructure! Join us. The world can’t wait.

Requirements

3+ years of experience implementing the Assessment and Authorization (A&A) process under Risk Management Framework (RMF) for new and existing information systems
3+ years of experience reviewing assessment reports and assisting projects in identifying security risks, including technical and non-technical, and developing effective mitigation strategies, including Plan of Action and Milestones
Experience with manual and automated vulnerability assessments for vulnerability management tools, such as Nessus Vulnerability Scanner
Experience developing test plans and procedures to address the level of effort for the IT system being accredited, and developing technical system requirements
Knowledge of RMF, NIST SP 800-53 Security and Privacy Controls, DoD cybersecurity policies, FISMA, or FEDRAMP
Knowledge of SCAP, STIG, and hardening implementation
TS/SCI clearance
Bachelor's degree
DoD 8570 IAT or IAM Level II Certification

Nice To Haves

Experience with SIEM tools, Splunk, monitoring operating systems security events, such as Windows or Linux, and networking protocols, such as TCP/IP, DNS, DHCP, or HTTP and HTTPS
Experience working with cloud providers, including Amazon Web Services (AWS)
DoD 8570 IAT or IAM Level III Certification