Security and Operations Engineer

Booz Allen Hamilton•Chantilly, VA

1d•$86,800 - $198,000

About The Position

Booz Allen is seeking a Security and Operations Engineer (SecOps Engineer) to install systems on cloud infrastructure, maintain infrastructure functionality and availability, and update and patch critical systems to improve the organization’s security posture. The role is suited to candidates with backgrounds in network engineering, systems administration, or software development who are interested in improving systems. The engineer develops and maintains security automation, tooling, and integrations; works with DevOps, IT, and Engineering to embed security into CI/CD pipelines and infrastructure; and performs log analysis, threat hunting, and forensic investigations as needed. The role also includes managing vulnerability management platforms, supporting security compliance initiatives, and building, testing, deploying, and refining operational images used to provision computational instances. The engineer continuously evaluates emerging threats and recommends improvements to security protections and monitoring. The position requires TS/SCI clearance with a polygraph. The posting lists annualized compensation of $86,800 to $198,000. Booz Allen describes benefits that include health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards. The specific work location type is not stated.

Requirements

At least 5 years of experience with RHEL systems administration.
At least 5 years of experience managing systems using Infrastructure as Code with Ansible or Terraform.
At least 2 years of experience with AWS.
Experience with container orchestration tools such as Kubernetes.
Experience with secure configuration guidelines, including DoD STIGs and CIS benchmarks.
Experience managing IAVAs, CVEs, patching, and hardening.
TS/SCI clearance with a polygraph.
A bachelor's degree and at least 5 years of experience patching Linux systems or installing applications on cloud infrastructure, or at least 9 years of that experience in lieu of a degree.
Ability to obtain a Security+ CE, SSCP, CCNA-Security, or GSEC certification within 6 months of the start date.

Nice To Haves

Experience working in cybersecurity.
Experience with cybersecurity concepts, including threats, vulnerabilities, security operations, patching, boundary defense, auditing, or authentication.
Experience with Jenkins, Packer, Git, Docker, Kubernetes, JIRA, and Confluence.
Knowledge of NIST 800-53 and NIST-190.
A master's degree in a related field.
Security+ CE, SSCP, CCNA-Security, or GSEC certification.

Responsibilities

Develop and maintain security automation, tooling, and integrations to improve detection and response times.
Collaborate with DevOps, IT, and Engineering teams to embed security into CI/CD pipelines and infrastructure.
Conduct log analysis, threat hunting, and forensic investigations as needed.
Manage and optimize vulnerability management platforms.
Support security compliance initiatives, including NIST, ISO 27001, FedRAMP, and SOC 2.
Assist in building, testing, deploying, and refining operational images used to build computational instances.
Evaluate emerging threats and recommend enhancements to protections and monitoring.