Security and Operations Engineer

Booz Allen Hamilton•Chantilly, VA

About The Position

Booz Allen is seeking a SecOps Engineer to install systems on cloud infrastructure, ensure infrastructure functionality and availability, and update and patch critical systems to improve the organization’s security posture. The role is suited to candidates with backgrounds in network engineering, systems administration, or software development who are motivated to improve systems. The engineer will develop and maintain security automation, tooling, and integrations; collaborate with DevOps, IT, and Engineering teams to embed security into CI/CD pipelines and infrastructure; conduct log analysis, threat hunting, and forensic investigations; manage vulnerability management platforms; and support security compliance initiatives. The role also involves building, testing, deploying, and refining operational images for computational instances, and evaluating emerging threats to recommend improvements to protections and monitoring. The position requires a TS/SCI clearance with polygraph. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. The projected annualized compensation range is $86,800 to $198,000. Booz Allen offers health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards. The posting is scheduled to close within 90 days of its posting date.

Requirements

At least 5 years of experience with RHEL systems administration.
At least 5 years of experience managing systems using Infrastructure as Code with Ansible or Terraform.
At least 2 years of experience with AWS.
Experience with container orchestration tools such as Kubernetes.
Experience with secure configuration guidelines, including DoD STIGs and CIS benchmarks.
Experience managing IAVAs, CVEs, patching, and hardening.
TS/SCI clearance with a polygraph.
Bachelor’s degree and at least 5 years of experience patching Linux systems or installing applications on cloud infrastructure, or at least 9 years of that experience in lieu of a degree.
Ability to obtain a Security+ CE, SSCP, CCNA-Security, or GSEC certification within 6 months of the start date.

Nice To Haves

Experience working in cybersecurity.
Experience with cybersecurity concepts, including threats, vulnerabilities, security operations, patching, boundary defense, auditing, or authentication.
Experience with Jenkins, Packer, Git, Docker, Kubernetes, JIRA, and Confluence.
Knowledge of NIST 800-53 and NIST-190.
Master’s degree in a related field.
Security+ CE, SSCP, CCNA-Security, or GSEC certification.

Responsibilities

Develop and maintain security automation, tooling, and integrations to improve detection and response times.
Collaborate with DevOps, IT, and Engineering teams to embed security into CI/CD pipelines and infrastructure.
Conduct log analysis, threat hunting, and forensic investigations as needed.
Manage and optimize vulnerability management platforms.
Support security compliance initiatives such as NIST, ISO 27001, FedRAMP, and SOC 2.
Assist in building, testing, deploying, and refining operational images used to build computational instances.
Continuously evaluate emerging threats and recommend enhancements to protections and monitoring.
Install systems on cloud infrastructure, ensure infrastructure is functional and available, and update and patch critical systems.