Cloud Cybersecurity Engineer

The Cloud Cybersecurity Engineer will evaluate and implement cloud security solutions while ensuring IT systems meet Information Assurance and RMF security requirements for Intelligence Community clients. The role involves crafting security controls, assessing compliance, and partnering with leadership to codify objectives.

Responsibilities

• Evaluate and support the documentation, validation, assessment, and accreditation processes necessary to verify IT systems meet IA and security requirements.
• Contribute to defining the organization’s desired state and risk thresholds, then analyze actual state data to gauge compliance.
• Collaborate with leaders to translate strategic objectives into doctrine and procedures that guide operations.
• Assist in evaluating computer applications, software, or specialized utilities to ensure security best practices are followed.
• Recommend tools and capabilities based on environment research and knowledge of on prem, cloud, and hybrid resources to address RMF security requirements.
• Apply technical experience to help clients demonstrate adherence to information assurance and security standards.
• Engage with clients to leverage the latest cloud technologies while identifying methods to secure environments and collaborate with future cloud security professionals.

Requirements

• At least one year of experience developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans.
• At least one year of experience with security architecture evaluations, guidance development, and troubleshooting.
• Experience working with cloud service providers, including AWS or Microsoft Azure.
• Knowledge of the NIST RMF and NIST SP 800-53 Security and Privacy Controls, FISMA, or FEDRAMP.
• Ability to use SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC Tools.
• Experience managing security applications within a Cloud Service Provider, including AWS, Microsoft Azure, or Google Cloud.
• Ability to use cloud services or security applications to generate reports for security analysis of processes and platforms.
• Top Secret clearance; high school diploma or GED.
• IAT or IAM Level II DoD 8570 Certification.

Technologies

• Amazon Web Services
• Microsoft Azure
• Google Cloud
• SD Elements
• Fortify Static Code Analyzer
• STIGs
• ACAS
• SCAP
• SCC Tools

Benefits

• Health benefits
• Life benefits
• Disability benefits
• Financial benefits
• Retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care

Clearance

Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information. A Top Secret clearance is required.

Compensation

The projected annual compensation range for this position is USD 61,900.00 to USD 141,000.00, varying by location and the candidate’s education, knowledge, skills, competencies, and experience, as well as contract-specific considerations.

Identity Statement

As part of the hiring process, an identity verification process using biometrics and artificial intelligence may be employed to ensure authenticity and prevent fraud. Interview and assessment sessions may require on-camera participation, and Booz Allen may capture images for identity verification purposes.

Candidate AI Usage Policy

AI tools are used within Booz Allen for daily work, but interviews may not rely on AI-assisted responses unless explicit permission is provided. The hiring process remains based on candidate skills and knowledge.

Work Model

• Onsite: Work will primarily occur at a Booz Allen office or a customer facility, with in-person collaboration as required.
• Hybrid: Regular presence at a Booz Allen facility is expected, with potential visits to customer facilities as needed.
• Remote: Some aspects may be performed remotely, but on-site work may be required periodically.

Commitment to Non-Discrimination

Booz Allen Hamilton provides equal employment opportunities to all qualified applicants without regard to disability, protected veteran status, or any other status protected by applicable law.

Nice If You Have

• 5+ years of experience in cybersecurity
• Experience with software development life cycle or DevSecOps
• Experience using security applications for enterprise vulnerability scanning
• Experience conducting penetration testing and working with containers or virtual machines
• Experience with Agile methodologies
• Knowledge of Xacta
• Ability to develop scripts, including Python, to test systems or automate security processes
• Ability to reverse engineer applications to develop security tests
• Bachelor's degree in Science, Technology, Engineering, or Mathematics
• IAT or IAM Level III DoD 8570 Certification