RMF Cybersecurity Engineer

Booz Allen Hamilton•Usa, MD

14h

About The Position

As a systems security and network security engineer, you can identify the NIST controls and documentation needed to assess vulnerabilities and recommend the best solution and security strategy. We need your experience to lead the development and implementation of security solutions that will enable communications between nations and allow for multi-national exercises and collaboration. On our team, you’ll troubleshoot and analyze complex challenges for customers using your knowledge of Cybersecurity requirements. You’ll use your curiosity for technology and market trends to further research and develop security solutions. Using your knowledge and experience in ACAS, eMASS and NIST 800-53, you’ll assess security threats and implement infrastructure controls. In this role, you’ll closely impact mission partner collaboration by driving scans, analyzing policies and assisting mission partners with connectivity. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.

Requirements

Experience with Tenable SC+
Knowledge of NIST 800-53 r5 controls
Ability to develop processes, procedures and policies to support cybersecurity compliance
Secret clearance
Bachelor's degree
Security+ Certification

Nice To Haves

Experience as an Information System Security Officer
Knowledge of a critical agency’s processes or procedures
Ability to understand complex regulatory jargon

Responsibilities

Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
Implement infrastructure and cyber security controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
Perform risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.