Information Systems Security Engineer

Booz Allen Hamilton•Herndon, VA

2d•$99,000 - $225,000•Onsite

About The Position

The Information Systems Security Engineer (ISSE) will lead the development and implementation of security solutions for a U.S. government client supporting cyber operations. The role identifies system security needs, assesses vulnerabilities, recommends security strategies, and applies security engineering, cloud security, enterprise risk management, and cybersecurity practices. The engineer will troubleshoot complex challenges using network scanning tools, security control frameworks, and cybersecurity methods for containerized environments, including Kubernetes and cloud methodologies. The position supports network security and cybersecurity hygiene for a government client with a high operational tempo. It involves implementing infrastructure controls, assessing security threats, and contributing to the protection of national security networks. The role also offers mentoring, hands-on problem-solving, and opportunities to learn new tools and skills. The position is located in Herndon, Virginia, and is not remote. A TS/SCI clearance with polygraph is required. The projected annual compensation range is $99,000 to $225,000.

Requirements

At least 5 years of experience with network Security Control Frameworks to support accreditation and cybersecurity standards.
At least 5 years of experience using and applying the National Institute for Standards and Technology (NIST).
Knowledge of technology security controls and the network accreditation process.
Active TS/SCI clearance with a polygraph is required.
High school diploma or GED.

Nice To Haves

Experience with cloud networking providers, including Amazon Web Services (AWS), Oracle, Microsoft, or Google.
Experience with scanning tools, including Nessus, Rapid7, or Nipper.
Experience monitoring and assessing risk on Plans of Action and Milestones (POA&M) items.
Experience analyzing scans, including NMAP, vulnerability, and scan results.

Responsibilities

Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
Perform risk and vulnerability assessments in network, system, and application areas.
Use big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
Collaborate with other teams, develop relationships, and communicate security complexities to audiences including senior management.
Assess security threats and implement infrastructure controls.