SATCOM Cyber Systems Security Engineer, Mid

Booz Allen Hamilton•Fort Meade, MD

3h•$69,400 - $158,000•Onsite

About The Position

This role focuses on satellite communications systems, including devices, implanting security systems, and identifying tools to support national security. The Satellite Communications Systems Security and Network Security Engineer will identify necessary tools, security systems, devices, and applications for vulnerability assessment and recommend optimal solutions and security strategies. The position involves developing and implementing security solutions to protect military and infrastructure. The engineer will join a team supporting engineering, sustainment, and management of communications systems, performing ongoing system analysis, risk assessments, assisting with vulnerability solutions, creating and mapping Security Technical Implementation Guides (STIGs), submitting change requests, developing Plans of Action and Milestones (POA&M), creating documentation for Risk Management Framework (RMF) accreditations, performing vulnerability management, and creating and submitting RMF packages. The role also includes briefing clients on technical security posture, preparing vulnerability summaries, and advising on threat prevention and mitigation. This position directly impacts a national security level communications system providing vital information to strategic and tactical users of the DoD Teleport system, with opportunities for mentoring, problem-solving, and learning new tools and skills.

Requirements

3+ years of experience implementing, testing, and validating STIGs, performing system self‑assessments, and creating STIG checklists
3+ years of experience executing IAVM actions, including IAVA alerts, bulletins, and tasking orders, and developing compliant engineering responses
3+ years of experience deploying and validating ESS, ACAS, and CMRS, analyzing ACAS scans, developing remediation strategies, and implementing patches and upgrades
3+ years of experience reviewing cybersecurity and engineering change requests to ensure operational availability and compliance
Knowledge of RMF and its application to networks and IT systems, including Cisco routers, switches, Active Directory, and access control
Ability to manage users in Windows and Linux and administer VMs in VMware or Hyper‑V
Ability to accredit and secure DoD systems using RMF, perform IAVA analysis, document POA&Ms, and prepare security assessment artifacts
Top Secret clearance
Bachelor’s degree in Science, Technology, or Engineering
Security+ Certification

Nice To Haves

Possession of excellent verbal and written communication skills
Cybersecurity Certification, such as CISSP or Certified Ethical Hacker Certification, or Networking Certification, such as Network+ or Cisco Certification

Responsibilities

Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
Perform risk and vulnerability assessments in network, system, and application areas.
Leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
Participate in the development of test strategies and conduct of testing, validating, and implementing applicable STIG requirements for current or new systems.
Conduct periodic self-assessments of systems to ensure STIG compliance.
Create STIG checklists to support periodic self-assessments.
Perform Information Assurance Vulnerability Management (IAVM) activities, such as IA vulnerability alerts, bulletins, and tasking orders.
Develop a systematic approach for responses to IAVM-related issues, to maintain system compliance.
Respond to Tasking Orders (TOs) and FRAGOs by remediating or mitigating vulnerabilities.