Information Systems Security Engineer

Booz Allen Hamilton•Herndon, VA

About The Position

The Information Systems Security Engineer will support a U.S. government client’s cyber operations by identifying system security needs, assessing vulnerabilities, and recommending security strategies. The role leads the development and implementation of security solutions and supports network security and cybersecurity hygiene in a high-operational-tempo environment. The engineer applies security engineering, cloud security, enterprise risk management, network scanning, cybersecurity best practices, security control frameworks, containerization, Kubernetes, Amazon Web Services, and other cloud methodologies. The role includes troubleshooting complex security challenges, researching technology and market trends, and implementing infrastructure controls to assess and address security threats. The position also contributes to enhanced detection and vulnerability capabilities and improved event correlation across large enterprises.

Requirements

At least 5 years of experience with network Security Control Frameworks supporting accreditation and cybersecurity standards.
At least 5 years of experience using and applying National Institute for Standards and Technology (NIST) standards.
Knowledge of technology security controls and the network accreditation process.
TS/SCI clearance with a polygraph.
High school diploma or GED.

Nice To Haves

Experience with cloud networking providers, including Amazon Web Services (AWS), Oracle, Microsoft, or Google.
Experience with scanning tools, including Nessus, Rapid7, or Nipper.
Experience monitoring and assessing risk on Plans of Action and Milestones (POA&M) items.
Experience analyzing scans, including NMAP, vulnerability, and scan results.

Responsibilities

Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
Perform risk and vulnerability assessments in network, system, and application areas.
Use big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
Collaborate with other teams and communicate security complexities to a wide variety of audiences, including senior management.
Support network security and cybersecurity hygiene for a government client.
Research and develop security solutions based on technology and market trends.