Cloud Cybersecurity Engineer

Summary

Booz Allen Hamilton is seeking a Cloud Cybersecurity Engineer to develop cloud-based security solutions for the Intelligence Community. The role involves assessing and implementing security requirements for information systems, ensuring compliance with Information Assurance standards, and collaborating with clients to enhance security measures.

Responsibilities

• Evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements
• Assist in defining the organization’s preferred state and risk thresholds and analyze actual state information to assess compliance
• Work with leaders to codify strategic objectives into doctrine and procedures that can help meet defined objectives
• Assist with the evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed
• Recommend tools and capabilities based on your research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements
• Work with our clients to ensure standards are met with information assurance and security requirements

Skills

• 1+ years of experience developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans
• 1+ years of experience with security architecture evaluations, guidance development, and troubleshooting
• 1+ years of experience working with cloud service providers, including Amazon Web Services or Microsoft Azure
• Knowledge of the NIST RMF and NIST SP 800-53 Security and Privacy Controls, FISMA, or FEDRAMP
• Ability to use SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC Tools
• Ability to manage security applications within a Cloud Service Provider, including Amazon Web Services (AWS), Microsoft Azure, or Google Cloud
• Ability to use cloud services or security applications to generate reports to conduct security analysis of processes and platforms
• Top Secret clearance
• HS diploma or GED
• IAT or IAM Level II DoD 8570 Certification
• 5+ years of experience in Cybersecurity
• Experience with the software development life cycle (SDLC) or DevSecOps
• Experience working with security applications to conduct enterprise vulnerability scanning
• Experience conducting penetration testing and working with Containers or Virtual Machines
• Experience with Agile Methodologies
• Knowledge of Xacta
• Ability to develop scripts, including Python, to test systems or automate security processes
• Ability to reverse engineer applications to develop security tests
• Bachelor's degree in Science, Technology, Engineering, or Mathematics
• IAT or IAM Level III DoD 8570 Certification

Qualifications

Must Haves

• 1+ years of experience developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans
• 1+ years of experience with security architecture evaluations, guidance development, and troubleshooting
• 1+ years of experience working with cloud service providers, including Amazon Web Services or Microsoft Azure
• Knowledge of the NIST RMF and NIST SP 800-53 Security and Privacy Controls, FISMA, or FEDRAMP
• Ability to use SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC Tools
• Ability to manage security applications within a Cloud Service Provider, including Amazon Web Services (AWS), Microsoft Azure, or Google Cloud
• Ability to use cloud services or security applications to generate reports to conduct security analysis of processes and platforms
• Top Secret clearance
• HS diploma or GED
• IAT or IAM Level II DoD 8570 Certification

Nice to Haves

• 5+ years of experience in Cybersecurity
• Experience with the software development life cycle (SDLC) or DevSecOps
• Experience working with security applications to conduct enterprise vulnerability scanning
• Experience conducting penetration testing and working with Containers or Virtual Machines
• Experience with Agile Methodologies
• Knowledge of Xacta
• Ability to develop scripts, including Python, to test systems or automate security processes
• Ability to reverse engineer applications to develop security tests
• Bachelor's degree in Science, Technology, Engineering, or Mathematics
• IAT or IAM Level III DoD 8570 Certification

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values
• Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs
• Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits