Cybersecurity and RMF Engineer, Mid

Cybersecurity and RMF Engineer, Mid

The Opportunity:

Are you looking for an opportunity to share your experience in cybersecurity and systems engineering that will support the U.S. Air Force? As a systems security and network security engineer, you can identify the tools needed to assess vulnerabilities and recommend the best solution and security strategy. We need your experience to oversee the development and implementation of security solutions that will protect our military.

On our team, you’ll supervise a team as they troubleshoot and analyze complex challenges for customers using your knowledge of network and security devices, applications, and identifying tools. You’ll manage the research of technology and market trends to further develop security solutions. Using your expertise in low-code or no-code systems and security protocols, you’ll assess security threats and implement infrastructure controls.  

In this role, you’ll directly impact Air Force human capital management by helping to secure our nation’s human capital systems. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.  

Work with us as we secure and protect the Air Force for the better. 

What You’ll Work On: 

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.

• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.  

• Lead risk and vulnerability assessments in network, system, and application areas.

• Leverage big data analytics and traditional security event types to identify advanced threats. 

Join us. The world can’t wait.

You Have: 

• 2+ years of experience with RMF, NIST 800-53, Zero Trust, STIGs, vulnerability management, ATO packages, POA&Ms, continuous monitoring, or secure cloud

• 2+ years of experience as an Information Systems Security Officer (ISSO), Information Systems Security Engineer (ISSE), or Information Systems Security Manager (ISSM)

• Experience in cybersecurity engineering and RMF alignment, supporting secure architecture, controls implementation, scanning, evidence generation, POA&M tracking, and continuous monitoring in IL5-ready environments with scalability to higher controls

• Ability to work with development teams to select the most suitable controls

• Secret clearance

• Bachelor's degree

Nice If You Have: 

• 2+ years of experience setting up or working with DevSecOps pipeline security tools, scanning, and reporting

• 2+ years of experience supporting and helping configure a DevOps team

• Experience developing SSP or ATO packages for systems deployed in a Microsoft Azure, AWS, or DoD cloud environment

• Amazon Web Service (AWS), Microsoft Azure, or Google Cloud Service Provider Certification

• DoD 8570 IAM II Certification such as SecurityX, CISM, or CISSP Certification

• DoD 8570 IASAE Level III Certification such as CISSP-ISSAP, CISSP-ISSEP, or CCSP Certification

Clearance: 

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health bene