Enterprise Data Cybersecurity Engineer, Lead

Booz Allen Hamilton is seeking an Enterprise Data Cybersecurity Engineer, Lead to design, drive, and measure enterprise data cybersecurity capabilities across production and extended enterprise environments. In this role, you will help shape data protection controls, reduce risk, support compliance monitoring, and coordinate defensive actions across multiple security disciplines.

Role Focus

• Collaborate with cross-functional teams to develop a business-wide converged technological security strategy for enterprise data cybersecurity capabilities.
• Lead the future security roadmap for the data cybersecurity stack, data protection programs, and go-to-market platform protection models.
• Own the data cyber solution stack, ensuring data protection controls are configured correctly and continuously reducing data cybersecurity risk.
• Ensure data platforms and configurations, including cloud data platforms, data lakes, databases, and storage systems, meet Booz Allen Hamilton security standards across production, test, and extended enterprise environments.
• Analyze and promote configuration policy changes with data engineering and platform teams.
• Support monitoring and compliance activities, including regular assessments to identify and remediate deviations.
• Originate, facilitate, and lead IT and security team efforts to deploy and maintain data protection solutions.
• Implement and validate data controls such as encryption, tokenization, masking, and key management to defend against emerging threats.
• Maintain a secure and resilient data ecosystem through data security configuration management.
• Partner with cyber threat and security operations to shape threat-informed data protection strategies.
• Communicate and coordinate response and defensive actions across multiple security disciplines.
• Disseminate technical information as appropriate to support critical business, go-to-market, and operational infrastructure needs.

Required Qualifications

• 7+ years of experience managing data platforms or data-centric IT solutions, including databases, data lakes, and cloud data environments.
• 3+ years of experience in cybersecurity solutions such as encryption, key management, data loss prevention (DLP), data classification, and securing structured and unstructured data, including database security, data storage protection, and data lifecycle management.
• Knowledge of cloud-native data architectures and security controls, including AWS, Azure, or GCP data services (for example: S3, Redshift, BigQuery, Azure Data Lake) and data access models and governance controls.
• Knowledge of modern encryption standards, key management systems (KMS), and emerging technologies such as quantum-resistant cryptography.
• Knowledge of key data-centric cyber threats including data exfiltration, insider threats, ransomware, and advanced persistent threats targeting sensitive data.
• Knowledge of key cyber processes including security incident handling, data risk posture measurement, change management, data governance, policy enforcement, and regulatory compliance.
• Ability to integrate disparate data security solutions across system, network, application, and cloud architectures, including integration via APIs and native cloud services.
• Ability to collaborate with professional confidence and credibility with technologists and leaders across the enterprise.
• Ability to obtain a Secret clearance.
• Bachelor’s degree.

Technologies

• AWS, Azure, GCP
• S3, Redshift, BigQuery, Azure Data Lake
• KMS
• APIs
• Encryption, tokenization, masking
• Data loss prevention (DLP), data classification
• Quantum-resistant cryptography

Nice If You Have

• Experience with programming or scripting languages used in data environments, such as Python or SQL.
• Experience with data governance frameworks, data classification standards, and privacy regulations including GDPR and CCPA.
• Knowledge of the application of Artificial Intelligence in data security and anomaly detection.
• Ability to design, deploy, and maintain data security solutions in enterprise-scale environments with large volumes of sensitive and regulated data.
• IT Engineering or Security certifications such as CISSP, CCSP, CDPSE, or cloud security certifications.

Compensation, Location, and Work Model

• Location: McLean, VA (onsite)
• Salary: USD 112,800 - 257,000 per year
• Work model: Onsite (primarily full-time at a customer facility)

Benefits

• Health insurance, life insurance, and disability insurance
• Financial benefits, retirement benefits, and paid leave
• Professional development and tuition assistance
• Work-life programs, dependent care, and a recognition awards program
• Full-time and part-time employees working at least 20 hours per week on a regular basis are eligible to participate in Booz Allen’s benefit programs

Clearance and Identity Requirements

• Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
• During the hiring process, you will complete an identity verification process that uses advanced biometrics and artificial intelligence to ensure authenticity and help protect against identity fraud.
• You are expected to be on camera during interviews and assessments; Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

• AI is part of daily work, and responsible and ethical use of AI tools is expected.
• Using artificial intelligence (AI) or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

Non-Discrimination Commitment

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other protected status under applicable federal, state, local, or international law.