Security and Operations Engineer

Booz Allen Hamilton•Chantilly, VA

6h•$86,800 - $198,000•Onsite

About The Position

Booz Allen is seeking a SecOps Engineer to install systems on cloud infrastructure, ensure infrastructure is functional and available, and update and patch critical systems to enhance security. The role develops security automation, tooling, and integrations; embeds security into CI/CD pipelines and infrastructure; performs log analysis, threat hunting, and forensic investigations; manages vulnerability platforms; supports compliance initiatives; and helps build, test, deploy, and refine operational images for computational instances. The engineer also evaluates emerging threats and recommends improvements to protections and monitoring. The position is based in Chantilly, Virginia, and is not remote. TS/SCI clearance with a polygraph is required.

Requirements

5+ years of experience with RHEL systems administration.
5+ years of experience managing systems using Infrastructure as Code with Ansible or Terraform.
2+ years of experience with AWS.
Experience with container orchestration tools such as Kubernetes.
Experience with secure configuration guidelines, including DoD STIGs and CIS benchmarks.
Experience managing IAVAs, CVEs, patching, and hardening.
TS/SCI clearance with a polygraph.
Bachelor’s degree and 5+ years of experience patching Linux systems or installing applications on cloud infrastructure, or 9+ years of experience in those areas in lieu of a degree.
Ability to obtain a Security+ CE, SSCP, CCNA-Security, or GSEC certification within 6 months of the start date.

Nice To Haves

Experience working in cybersecurity.
Experience with cybersecurity concepts, including threats, vulnerabilities, security operations, patching, boundary defense, auditing, or authentication.
Experience with Jenkins, Packer, Git, Docker, Kubernetes, JIRA, and Confluence.
Knowledge of NIST 800-53 and NIST-190.
Master’s degree in a related field.
Security+ CE, SSCP, CCNA-Security, or GSEC certification.

Responsibilities

Develop and maintain security automation, tooling, and integrations to improve detection and response times.
Collaborate with DevOps, IT, and Engineering teams to embed security into CI/CD pipelines and infrastructure.
Conduct log analysis, threat hunting, and forensic investigations as needed.
Manage and optimize vulnerability management platforms.
Support security compliance initiatives, including NIST, ISO 27001, FedRAMP, and SOC 2.
Assist in building, testing, deploying, and refining operational images used to build computational instances.
Evaluate emerging threats and recommend enhancements to protections and monitoring.
Install systems on cloud infrastructure and ensure infrastructure is functional and available.
Update and patch critical systems to enhance the security posture.