Platform Security Engineer

Build secure software delivery end-to-end in a role focused on automation, compliance, and modern DevSecOps practices. This Platform Security Engineer position at Booz Allen Hamilton supports secure CI/CD, infrastructure-as-code hardening, and zero trust adoption within a defense environment in McLean, VA (onsite).

With a salary range of USD 77,600 - 176,000 per year, you will apply expertise across pipeline security tooling (SAST, DAST, SCA, and container scanning), policy enforcement, and continuous ATO support. The work includes helping mission-critical systems meet Department of War (DoW) cybersecurity mandates while assisting incident response efforts.

What you’ll do

• Integrate and enhance security across software delivery pipelines using DevSecOps.
• Fortify mission-critical systems and support compliance with DoW cybersecurity mandates.
• Evolve CI/CD pipelines by integrating and automating security tools such as SAST, DAST, SCA, and container scanning to meet DoW requirements and reduce operational risk.
• Continuously improve pipeline security by refining vulnerability detection thresholds, tuning scanners, reducing false positives, and optimizing remediation workflows.
• Harden infrastructure-as-code templates, including Terraform, and enforce policy-as-code across environments.
• Conduct risk assessments and contribute to SSPs (system security plans) and continuous ATO efforts.
• Collaborate with development, operations, and security teams to support secure software delivery.
• Monitor pipeline activity for anomalies and assist in security incident response.
• Champion zero trust principles and drive adoption across the SDLC.

What you’ll need

• 5+ years of experience in cybersecurity engineering, including DevSecOps in federal or defense environments using IaC/CaC, CI/CD, and SDLC concepts.
• 3+ years of software engineering experience using Python, Typescript, or Bash and automation frameworks.
• 2+ years implementing cybersecurity solutions in AWS cloud and container orchestration such as Kubernetes.
• Experience with AI software development tools such as Claude Code, Codex, or Pi.
• Experience using Agile and Change Management methodologies.
• Knowledge of cybersecurity best practices and threat-based frameworks, including AI/ML security best practices.
• Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools.
• Ability to obtain a Secret clearance.
• HS diploma or GED.

Technologies you’ll work with

• DevSecOps, CI/CD, SDLC, SAST, DAST, SCA, container scanning
• Terraform, policy-as-code, AWS cloud, Kubernetes
• Python, Typescript, Bash, Claude Code, Codex, Pi
• NIST SP 800-53, RMF, eMASS, STIG Manager, STIG Viewer, SCAP tools, IaC/CaC

Nice if you have

• Experience reviewing code samples and applying whitelisting or exemption processes.
• Experience developing Zero Trust security solutions for DevSecOps pipelines.
• Experience evaluating security tools and assessing fit for inclusion in Development or Operational environments.
• Knowledge of GRC engineering practices, including automated compliance validation, continuous control monitoring, security control mapping (NIST 800-53, RMF, or CIS), risk assessment automation, audit evidence collection, compliance reporting, and integrating GRC requirements into CI/CD and DevSecOps workflows.
• Excellent verbal, technical writing, and documentation skills.
• Secret clearance.
• Bachelor’s degree in Cybersecurity, Computer Science, or related field.
• Security+ or AWS Solutions Architect, AWS Security, or CISSP certifications.

Security and interview policy

Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Candidate AI usage policy: The use of AI or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

Work model

Onsite: Work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Identity verification

As part of the hiring process, an identity verification process will be used that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments, and the company reserves the right to take your picture to verify your identity and prevent fraud.

Location: McLean, VA (onsite)

Salary: USD 77,600 - 176,000 per year

Minimum experience: 2 years

Education: HS diploma or GED