Risk Management Framework Cyber Engineer

Booz Allen Hamilton•El Segundo, CA

2d•$86,800 - $198,000•Remote

About The Position

As a Risk Management Framework engineer, you understand how to apply cybersecurity to the development and delivery of cyber resilient systems. At Booz Allen, you can use your cybersecurity experience to create solutions that will be executed on a worldwide stage. We’re looking for a cyber specialist like you to apply your experience to impact our nation’s defenses. In this role, you’ll be counted on to help understand cyberspace capabilities to evaluate potential weaknesses as well as the effectiveness of mitigations for cybersecurity solutions. You will work with your team to provide advice on security control implementation and executing the RMF process for the customer's mission area. This is an opportunity to use your research and analysis abilities to adequately assess and inform key stakeholders on dynamic adversarial tactics, techniques, and procedures for our client. If you want to be in the fight, working shoulder to shoulder with our clients, and influencing the most critical global cyber missions, this is the opportunity for you. Join us. The world can’t wait.

Requirements

4+ years of experience with guiding a client through the entire Risk Management Framework (RMF) processes, such as DoDI 8510, AFI 17-101, NIST SP 800-37, or NIST SP 800-53
Experience in interpreting security controls and requirements to communicate with system developers, sustainment teams, and other stakeholders
Experience with developing and interpreting technical specifications, plans and schedules, system diagrams, and network diagrams to assess control satisfaction
Experience with using security tools, including the Enterprise Mission Assurance Support Service (eMASS) system
Knowledge of Space Vehicle cybersecurity requirements, such as CNSSI 1253 Space Platform Overlay, or CNSSP 12
Knowledge of information technology solutions used to implement security controls, such as boundary protection, data encryption, authentication, audit logs, or vulnerability scanning
Secret clearance
Bachelor’s degree
DoD 8140 Intermediate Certification level for Security Architect, System Testing and Evaluation Specialist, Information Systems Security Manager, or Information Systems Security Developer, such as CASP+, CEH, GSEC, Security+, or CGRC

Nice To Haves

Experience with Cyber Test and Evaluation processes, such as Cyber Table Top
Experience with space-based remote sensing systems
Knowledge of DoD 5000.01/02
TS/SCI clearance
Bachelor’s degree in Information Technology, Cybersecurity, or Engineering preferred; Master’s degree a plus
DoD 8140 Advanced Certification level for Security Architect, System Testing and Evaluation Specialist, Information Systems Security Manager, or Information Systems Security Developer, such as CISSP-ISSEP, CISSP-ISSAP, CISM, GDSA, GICSP, or GCIH

Responsibilities

Apply cybersecurity to the development and delivery of cyber resilient systems.
Understand cyberspace capabilities to evaluate potential weaknesses and the effectiveness of mitigations for cybersecurity solutions.
Provide advice on security control implementation.
Execute the RMF process for the customer's mission area.
Assess and inform key stakeholders on dynamic adversarial tactics, techniques, and procedures.