Information Systems Security Engineer

Are you looking for an opportunity to share your experience in system security engineering to help our country and assist our clients with critical missions? You'll ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration. You will coordinate changes or modifications with the appropriate Information System Security Manager (ISSM) and implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation. You'll perform documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Operate (IATO) and Authority to Operate (ATO). Support DoD and military clients in developing cutting-edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies. Assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective.

Responsibilities

• Guide clients through the entire Risk Management Framework (RMF) and Authority to Operate (ATO) process
• Coordinate changes or modifications with the appropriate Information System Security Manager (ISSM)
• Implement and enforce DoD cybersecurity policies and procedures
• Document, monitor, update, and manage systems to maintain security posture and achieve IATO and ATO
• Support DoD and military clients in developing cybersecurity solutions, including technical implementations and RMF
• Conduct enterprise vulnerability scanning using security applications such as ACAS
• Perform risk remediation efforts and security control assessments
• Integrate security principles to ensure compliance with DoD directives and Security Technical Implementation Guides (STIGs)
• Engineer, implement, and harden robust security solutions, including firewalls, Intrusion Detection and Prevention Systems (IDS/IPS), and Security Information and Event Management (SIEM) tools
• Work with minimal supervision within established procedures and practices

Requirements

• 3+ years of experience guiding a client through the entire Risk Management Framework (RMF) and Authority to Operate (ATO) process
• Experience working as an Information System Security Engineer (ISSE), Information System Security Officer (ISSO), or a role in Information Technology, Cybersecurity, or IT Service Management
• Experience conducting enterprise vulnerability scanning using security applications such as ACAS
• Experience performing risk remediation efforts, conducting security control assessments, and integrating security principles to ensure compliance with DoD directives and STIGs
• Experience achieving system certification, accreditation, assessment, and authorization, including IATT and ATOs
• Experience engineering, implementing, and hardening robust security solutions, including firewalls, IDS/IPS, and SIEM tools
• Knowledge of systems and software engineering management processes and their implementation in DoD acquisition processes throughout all life cycle phases
• Knowledge of DoD communication, cybersecurity, and IT systems
• Top Secret clearance
• Associate's degree and 7+ years of experience in Cybersecurity, Bachelor’s degree and 3+ years of experience in Cybersecurity, or 9+ years of experience in Cybersecurity in lieu of a degree
• DoD 8140 IAT Level II Certification

Preferred Qualifications

• Experience with DevSecOps
• Experience with Cloud technologies and environments such as AWS
• Experience with Agile methodologies
• Experience with Operating Systems, including Linux, UNIX, Ubuntu, or Red Hat
• Ability to apply Cybersecurity engineering methods to solution development life cycle activities
• Ability to research emerging technology and apply it to cutting-edge problems
• Excellent presentation and collaboration skills
• Master's degree in Computer Science or Cybersecurity
• CISSP-ISSEP, CCSP, or CISM Certification

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care
• Recognition awards program for exceptional performance and superior demonstration of values

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Pay

Salary is determined by various factors, including location, education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $77,500.00 to $176,000.00 (annualized USD).

Schedule

This posting will close within 90 days from the posting date.

Work model expectations:

• Remote: Generally virtual, with occasional in-person work at a Booz Allen or customer facility.
• Hybrid: Frequent work from a Booz Allen facility, with potential visits to customer facilities as needed.
• Onsite: Work primarily performed at a Booz Allen office or customer facility, collaborating directly with colleagues and customers.

Employees working virtually are generally expected to have their cameras on during meetings to support engagement and effective communication.