Platform Security Engineer

Booz Allen Hamilton•McLean, VA

1d•$77,600 - $176,000

About The Position

Apply DevSecOps expertise to integrate and enhance security across software delivery pipelines, fortify mission-critical systems, and support compliance with Department of War (DoW) cybersecurity mandates. The engineer serves as a technical expert in secure development practices and continuous improvement across the CI/CD ecosystem. The role evolves secure CI/CD pipelines by integrating and automating security tools—including SAST, DAST, SCA, and container scanning—to meet DoW requirements and reduce operational risk. It continuously improves pipelines by refining vulnerability detection thresholds, tuning scanners, reducing false positives, and optimizing remediation workflows. Responsibilities also include hardening infrastructure-as-code templates, including Terraform; enforcing policy-as-code; conducting risk assessments; and contributing to system security plans (SSPs) and continuous ATO efforts. The engineer collaborates with development, operations, and security teams to support secure software delivery, monitors pipeline activity for anomalies, and assists with security incident response. The role also champions zero trust principles and drives their adoption across the SDLC. Applicants selected will undergo a security investigation and may need to meet eligibility requirements for access to classified information. The position’s projected annualized compensation range is $77,600 to $176,000, with salary determined by factors such as location, qualifications, experience, and organizational requirements.

Requirements

5+ years of cybersecurity engineering experience, including DevSecOps in federal or defense environments employing IaC/CaC, CI/CD, and SDLC concepts.
3+ years of software engineering experience using Python, TypeScript, or Bash and automation frameworks.
2+ years of experience implementing cybersecurity solutions in AWS cloud and container orchestration such as Kubernetes.
Experience with AI software development, Claude Code, Codex, or Pi.
Experience using Agile and Change Management methodologies.
Knowledge of cybersecurity best practices and threat-based cybersecurity frameworks, including AI/ML security best practices.
Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools.
Ability to obtain a Secret clearance.
High school diploma or GED.

Nice To Haves

Experience reviewing code samples and applying whitelisting or exemption processes.
Experience developing Zero Trust security solutions for DevSecOps pipelines.
Experience evaluating security tools and assessing their fit for Development or Operational environments.
Knowledge of GRC engineering practices, including policy-as-code implementation, automated compliance validation, continuous control monitoring, security control mapping such as NIST 800-53, RMF, or CIS, risk assessment automation, POA&M management, audit evidence collection, compliance reporting, and integration of GRC requirements into CI/CD and DevSecOps workflows.
Excellent verbal, technical writing, and documentation skills.
Possession of a Secret clearance.
Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
Security+, AWS Solutions Architect, AWS Security, or CISSP certifications.

Responsibilities

Integrate and automate security tools, including SAST, DAST, SCA, and container scanning, in secure CI/CD pipelines.
Refine vulnerability detection thresholds, tune scanners, reduce false positives, and optimize remediation workflows.
Harden infrastructure-as-code templates, including Terraform, and enforce policy-as-code across environments.
Conduct risk assessments and contribute to system security plans (SSPs) and continuous ATO efforts.
Collaborate with development, operations, and security teams to support secure software delivery.
Monitor pipeline activity for anomalies and assist with security incident response.
Champion zero trust principles and drive their adoption across the SDLC.