Enterprise Data Cybersecurity Engineer, Lead

McLean, VA (Onsite) Enterprise Data Cybersecurity Lead role focused on designing and improving data cybersecurity solutions worldwide.

Responsibilities

• Own Booz Allen Hamilton data cybersecurity solution design, strategy, and effectiveness.
• Help shape global data cybersecurity capabilities by collaborating with cross-functional teams on a business-wide converged technological security strategy.
• Drive the future security roadmap for the data cybersecurity stack, data protection programs, and go-to-market platform protection models.
• Maintain accountability for the data cyber solution stack, ensuring data protection controls are correctly configured and continually reducing data cybersecurity risk.
• Ensure data platforms and configurations meet security standards across production, test, and extended enterprise environments, including cloud data platforms, data lakes, databases, and storage systems.
• Analyze and promote configuration policy changes with data engineering and platform teams.
• Monitor compliance and run regular assessments to identify and remediate deviations; promote a data security culture with stakeholders.
• Originate, facilitate, and lead IT and security team efforts to deploy and maintain data protection solutions.
• Ensure data controls such as encryption, tokenization, masking, and key management are properly implemented against emerging threats.
• Maintain a secure and resilient data ecosystem using data security configuration management.
• Partner with cyber threat and security operations to develop threat-informed data protection strategies.
• Coordinate response and defensive actions across multiple security disciplines, disseminating technical information as appropriate to support critical business and operational infrastructure needs.

Requirements

• 7+ years managing data platforms or data-centric IT solutions, including databases, data lakes, and cloud data environments.
• 3+ years cybersecurity solutions experience including encryption, key management, DLP, data classification, and securing structured and unstructured data (database security, data storage protection, and data lifecycle management).
• Knowledge of cloud-native data architectures and security controls, including AWS, Azure, or GCP data services such as S3, Redshift, BigQuery, Azure Data Lake, plus data access models and governance controls.
• Knowledge of modern encryption standards, key management systems (KMS), and quantum-resistant cryptography.
• Knowledge of key data-centric cyber threats, including data exfiltration, insider threats, ransomware, and advanced persistent threats targeting sensitive data.
• Knowledge of cybersecurity processes such as security incident handling, data risk posture measurement, change management, data governance, policy enforcement, and regulatory compliance.
• Ability to integrate disparate data security solutions across system, network, application, and cloud architectures, including integration via APIs and native cloud services.
• Ability to collaborate with professional confidence and credibility across enterprise technologists and leaders.
• Ability to obtain a Secret clearance.
• Bachelor’s degree.

Technologies

• AWS, Azure, GCP
• S3, Redshift, BigQuery, Azure Data Lake
• Encryption, tokenization, masking
• Key management, key management systems (KMS)
• Data loss prevention (DLP)
• APIs
• Quantum-resistant cryptography

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Recognition awards program

Nice If You Have

• Experience with programming or scripting languages used in data environments such as Python or SQL.
• Experience with data governance frameworks, data classification standards, and privacy regulations including GDPR and CCPA.
• Knowledge of database structures, data modeling, and query optimization, including SQL and NoSQL platforms.
• Knowledge of the application of Artificial Intelligence in data security and anomaly detection.
• Ability to design, deploy, and maintain data security solutions in enterprise-scale environments with large volumes of sensitive and regulated data.
• IT Engineering or Security certifications such as CISSP, CCSP, CDPSE, or cloud security certifications.

Clearance

• Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Identity Verification

• Identity verification uses advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
• You are expected to be on camera during interviews and assessments.
• We may take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

• AI tools may not be used to assist with responses during interviews (in-person or virtual) unless permission is explicitly provided.

Work Model

• Onsite: primarily full-time at a customer facility, collaborating directly with colleagues and customers as required.

Commitment to Non-Discrimination

• All qualified applicants receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.