Enterprise Data Cybersecurity Engineer, Lead

Lead the design, strategy, and continuous improvement of enterprise data cybersecurity capabilities across Booz Allen Hamilton.

Responsibilities

• Collaborate with cross-functional teams to help shape Booz Allen’s worldwide data cybersecurity capabilities and develop a business-wide converged technological security strategy
• Own the future security roadmap for the Data cybersecurity stack, data protection programs, and go-to-market platform protection models
• Be accountable for the data cyber solution stack, ensuring data protection controls are correctly configured and continuously reducing data cybersecurity risk
• Ensure data platforms and configurations meet Booz Allen security standards across production, test, and extended enterprise environments
• Work with data engineering and platform teams to analyze and promote configuration policy changes
• Monitor compliance and perform regular assessments to identify and remediate deviations
• Partner with stakeholders to promote a strong data security culture
• Originate, facilitate, and lead IT and security teams’ efforts to deploy and maintain data protection solutions
• Ensure data controls including encryption, tokenization, masking, and key management are implemented to defend against emerging threats
• Maintain a secure and resilient data ecosystem through data security configuration management
• Partner with cyber threat and security operations to drive threat-informed data protection strategies
• Communicate and coordinate response and defensive actions across multiple security disciplines
• Disseminate technical information as appropriate to support critical business, go-to-market, and operational infrastructure needs

Requirements

• 7+ years of experience managing data platforms or data-centric IT solutions, including databases, data lakes, and cloud data environments
• 3+ years of cybersecurity solutions experience, including encryption, key management, data loss prevention (DLP), data classification, securing structured and unstructured data, database security, data storage protection, and data lifecycle management
• Knowledge of cloud-native data architectures and security controls using AWS, Azure, or GCP (including S3, Redshift, BigQuery, Azure Data Lake) and associated data access models and governance controls
• Knowledge of modern encryption standards, key management systems (KMS), and emerging technologies such as quantum-resistant cryptography
• Knowledge of data-centric cyber threats including data exfiltration, insider threats, ransomware, and advanced persistent threats targeting sensitive data
• Knowledge of cyber processes such as security incident handling, data risk posture measurement, change management, data governance, policy enforcement, and regulatory compliance
• Ability to integrate disparate data security solutions across system, network, application, and cloud architectures, including integration via APIs and native cloud services
• Ability to collaborate with professional confidence and credibility with technologists and leaders across the enterprise
• Ability to obtain a Secret clearance
• Bachelor’s degree

Technologies

• AWS, Azure, GCP
• S3, Redshift, BigQuery, Azure Data Lake
• KMS, APIs
• Encryption, tokenization, masking
• Data loss prevention (DLP), data classification
• Quantum-resistant cryptography

Benefits

• Health insurance
• Life insurance
• Disability insurance
• Financial benefits
• Retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Recognition awards program
• Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs

Nice If You Have

• Experience with programming or scripting languages used in data environments such as Python or SQL
• Experience with data governance frameworks, data classification standards, and privacy regulations including GDPR and CCPA
• Knowledge of the application of Artificial Intelligence in data security and anomaly detection
• Ability to design, deploy, and maintain data security solutions in enterprise-scale environments with large volumes of sensitive and regulated data
• IT Engineering or Security certifications such as CISSP, CCSP, CDPSE, or cloud security certifications

Clearance

• Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information

Identity Statement

• Identity verification process may include advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud
• You are expected to be on camera during interviews and assessments
• Booz Allen may take your picture to verify your identity and prevent fraud

Candidate AI Usage Policy

• AI is part of daily work, and the responsible and ethical use of AI tools is supported
• Using AI or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided

Work Model

• Onsite: Work will primarily be performed full-time at a customer facility where employees collaborate directly with colleagues and customers as required by the role

Commitment to Non-Discrimination

• All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law

Location: McLean, VA (onsite)

Salary: USD 112,800 - 257,000 per yearly

Minimum experience: 3 years

Education: Bachelor’s degree