Join Booz Allen Hamilton as a lead enterprise data cybersecurity engineer in McLean, VA (onsite). In this role, you will help shape and strengthen data security across the enterprise, designing protection controls that reduce data cybersecurity risk worldwide and coordinating defensive actions across security disciplines. You will work with teams building long-term capabilities in data protection, governance, and threat-informed security strategy.
What you’ll do
- Lead Booz Allen’s data cybersecurity solution design, strategy, and effectiveness, accountable for continual improvement of the data security stack.
- Collaborate with cross-functional teams to develop a business-wide converged technological security strategy that strengthens data cybersecurity capabilities globally.
- Drive the future security roadmap for the data cybersecurity stack, data protection programs, and go-to-market platform protection models.
- Ensure data protection controls are configured appropriately across platforms and environments, continually reducing risk.
- Help ensure data platforms, including cloud data platforms, data lakes, databases, and storage systems, and their configurations across production, test, and extended enterprise environments meet security standards.
- Analyze and promote configuration policy changes with data engineering and platform teams.
- Monitor compliance through regular assessments, remediate deviations, and coordinate with stakeholders to support a strong data security culture.
- Originate, facilitate, and lead efforts to deploy and maintain data protection solutions with IT and security teams.
- Ensure key data protection capabilities such as encryption, tokenization, masking, and key management are implemented to defend against emerging threats.
- Maintain a secure and resilient data ecosystem using data security configuration management.
- Partner with cyber threat and security operations to shape threat-informed data protection strategies.
- Communicate and coordinate response and defensive actions across multiple security disciplines, sharing technical information as appropriate for business and operational needs.
Required qualifications
- 7+ years of experience managing data platforms or data-centric IT solutions, including databases, data lakes, and cloud data environments.
- 3+ years of experience in cybersecurity solutions such as encryption, key management, data loss prevention (DLP), data classification, and securing structured and unstructured data (including database security, data storage protection, and data lifecycle management).
- Knowledge of cloud-native data architectures and security controls, including AWS, Azure, or GCP data services (such as S3, Redshift, BigQuery, Azure Data Lake) plus data access models and governance controls.
- Knowledge of modern encryption standards, key management systems (KMS), and emerging technologies such as quantum-resistant cryptography.
- Knowledge of key data-centric cyber threats, including data exfiltration, insider threats, ransomware, and advanced persistent threats targeting sensitive data.
- Knowledge of cyber processes including security incident handling, data risk posture measurement, change management, data governance, policy enforcement, and regulatory compliance.
- Ability to integrate disparate data security solutions across system, network, application, and cloud architectures, including integration via APIs and native cloud services.
- Ability to collaborate with professional confidence and credibility with technologists and leaders across the enterprise.
- Ability to obtain a Secret clearance.
- Bachelor’s degree.
Technologies
- AWS, Azure, GCP
- S3, Redshift, BigQuery, Azure Data Lake
- Encryption, tokenization, masking, key management, KMS
- Data loss prevention (DLP)
- APIs
- Quantum-resistant cryptography
Benefits
- Health, life, disability, financial, and retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
- Recognition awards program
Work model and location
Onsite: work will primarily be performed full-time at a customer facility, with collaboration as required by the role.
Clearance and identity verification
- Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
- During the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.
AI usage policy
AI is part of daily work at Booz Allen, and the company is committed to responsible and ethical use of AI tools. Use of artificial intelligence or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.
Non-discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.
