Cloud Cybersecurity Engineer

Responsibilities

• Evaluate and support the documentation, validation, assessment, and accreditation activities to ensure IT systems satisfy Information Assurance requirements.
• Define the organization’s target state and risk thresholds, then analyze current state information to verify compliance.
• Collaborate with leaders to translate strategic objectives into doctrine and procedures.
• Contribute to evaluating applications, software, or utility programs to confirm software assurance best practices are followed.
• Recommend tools and capabilities based on environment research across on‑premises, cloud, and hybrid resources to address RMF security requirements.
• Apply technical expertise to ensure standards are met for information assurance and security requirements for clients.
• Leverage the latest cloud technologies to secure customer environments while partnering with the next generation of cloud security professionals.

Requirements

• 1+ years developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans.
• 1+ years in security architecture evaluations, guidance development, and troubleshooting.
• 1+ years working with cloud service providers, including AWS or Microsoft Azure.
• Knowledge of the NIST RMF and NIST SP 800-53 Security and Privacy Controls, FISMA, or FEDRAMP.
• Ability to use SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC tools.
• Experience managing security applications within a Cloud Service Provider environment, including AWS, Microsoft Azure, or Google Cloud.
• Ability to generate reports from cloud services or security applications to conduct security analysis.
• Top Secret clearance.
• HS diploma or GED.
• IAT or IAM Level II DoD 8570 Certification.

Technologies

• Amazon Web Services
• Microsoft Azure
• Google Cloud
• SD Elements
• Fortify Static Code Analyzer
• STIGs
• ACAS
• SCAP
• SCC Tools

Benefits

• Health benefits
• Life benefits
• Disability benefits
• Financial benefits
• Retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Top Secret clearance is required.

Compensation

The projected salary range for this role is $61,900.00 to $141,000.00 annually (USD). Exact compensation depends on location, education, experience, skills, and contract specifics; this range reflects Booz Allen Hamilton's typical range for the position.

Identity Statement

As part of the hiring process, you will complete an identity verification process that uses biometrics and AI to ensure authenticity. You may be on camera during interviews and assessments, and Booz Allen may capture your image to verify identity.

Candidate AI Usage Policy

AI tools are part of Booz Allen’s daily workflow, but use of AI to assist with interview responses is prohibited unless explicitly permitted.

Work Model

• Remote: May require in-person work at Booz Allen or a client facility on occasion.
• Hybrid: Frequent in-person work from a Booz Allen facility, with potential visits to a client site as needed.
• Onsite: Primarily performed at a Booz Allen office or client facility, with collaboration on-site as required.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

Nice If You Have

• 5+ years of experience in cybersecurity
• Experience with the software development life cycle or DevSecOps
• Experience using security applications to conduct enterprise vulnerability scanning
• Experience performing penetration testing and working with containers or virtual machines
• Experience with Agile methodologies
• Knowledge of Xacta
• Ability to develop scripts, including Python, to test systems or automate security processes
• Ability to reverse engineer applications to develop security tests
• Bachelor's degree in Science, Technology, Engineering, or Mathematics
• IAT or IAM Level III DoD 8570 Certification