Information Systems Security Engineer

Information Systems Security Engineer

The Opportunity:

Everyone knows security needs to be “baked in” to a system engineering, but you know how to bake it in. You can identify and implement ways to harden systems and reduce their attack surface. What if you could use your cyber engineering skills to design and develop secure systems for customers? We’re looking for an engineer who can help create solutions for customers that will withstand even the most advanced cyber threats.

As a cyber operations engineer at Booz Allen, you’ll enhance the design and secure a mission-critical network for our DoD client. You’ll work with in-house experts to identify the right mix of tools and techniques to translate your client’s needs and goals into a plan that will enable secure and effective solutions. We need to come up with the best solutions, so you’ll investigate new techniques, break free from the legacy model, and go where the industry is going. As a team, we’ll take a critical approach to network design, providing alternatives and customizing solutions to maintain a balance of security and mission needs.

This is a chance to learn from a team of experts as you make a difference in the security of warfighter communications. Your contributions will help customers overcome their most difficult challenges by integrating secure practices like endpoint-based detection solutions and multi-factor authentication. You’ll be able to gain experience in system design, security, network operations, and integration of security solutions to secure our clients network and meet mission needs.

What You’ll Work On:

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.

• Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.

• Perform risk and vulnerability assessments in network, system, and application areas and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.

Work with us as we improve warfighter communications through cybersecurity. 

Join us. The world can’t wait.

You Have:   

• 2+ years of experience guiding a client through the entire Risk Management Framework (RMF) process

• Experience with networks and network devices, configuring firewalls, routers, and switches in a Zero Trust environment

• Experience with engineering and integration of security controls and data-centric architectures to enable selective and secure information-sharing based on role, identity, and need-to-know IAW governmental standards

• Knowledge of the Seven Pillars of Zero Trust

• Knowledge of the systems and software engineering management process and its implementation, as applied to DoD acquisition processes throughout all life cycle phases

• Ability to implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises

• Ability to perform risk and vulnerability assessments in network, system, and application areas and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise

• Active TS/SCI clearance; willingness to take a polygraph exam

• HS diploma or GED

• IASAE II Certification, including CASP+ CE, CISSP or Associate, or CSSLP Certification

Nice If You Have:   

• Experience achieving system certification, accreditation, assessment, and authorization, including IATTs and ATOs

• Experience with STIGs, interpretation, and mitigation of results

• Experience with DevSecOps

• Knowledge of Army or DoD communication, cybersecurity, and IT systems

• Ability to develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management

• Ability to apply cybersecurity engineering methods to solutions development life cycle activities, research emerging technology, and apply it to cutting-edge problems

• Possession of excellent presentation, collaboration, and interpersonal skills

• TS/SCI clearance with a polygraph

• Master's degree in CS or Cybersecurity

• IASAE III Certification, including CISSP-ISSEP, CISSP-ISSAP, or CCS Certification