Booz Allen Hamilton offers a robust benefits package and a culture focused on growth, collaboration, and real-world impact. This onsite, Arlington, VA role provides health, life, and disability coverage, a strong retirement program, and ample opportunities for professional development, tuition assistance, and work-life balance. Join a team supporting the U.S. Air Force with RMF alignment, vulnerability management, and security solution development, and advance your career through hands-on work with modern cloud environments and advanced analytics.
Benefits
- Health benefits
- Life benefits
- Disability benefits
- Financial benefits
- Retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
Responsibilities
- Build strong cross-team relationships and distill security concepts for a range of audiences, including senior management.
- Oversee infrastructure and cybersecurity controls with enhanced detection, vulnerability management, and improved event correlation at large enterprises.
- Lead risk and vulnerability assessments across network, system, and application domains.
- Apply big data analytics alongside standard security events to detect advanced threats.
Requirements
- 2+ years of experience with RMF, NIST 800-53, Zero Trust, STIGs, vulnerability management, ATO packages, POA&M, continuous monitoring, or secure cloud
- 2+ years of experience as an ISSO, ISSE, or ISSM
- Experience in cybersecurity engineering and RMF alignment for secure architecture, controls implementation, scanning, evidence generation, POA&M tracking, and continuous monitoring in IL5-ready environments with scalability to higher controls
- Ability to collaborate with development teams to select appropriate controls
- Secret clearance
- HS diploma or GED
Technologies
- AWS
- Microsoft Azure
- Google Cloud Service Provider Certification
Nice if you have
- 2+ years setting up or working with DevSecOps pipeline security tools, scanning, and reporting
- 2+ years supporting and helping configure in a DevOps team
- Experience developing SSP or ATO packages for systems in Microsoft Azure, AWS, or DoD cloud environments
- Bachelor's degree
- Amazon Web Service, Microsoft Azure, or Google Cloud Service Provider Certification
- DoD 8570 IAM II or higher Certification such as SecurityX, CISM, or CISSP
- DoD Directive 8570.01-M for IASAE Level III Certification such as CISSP-ISSAP, CISSP-ISSEP, or CCSP
Clearance
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Secret clearance is required.
Compensation
The projected compensation range is $69,400.00 to $158,000.00 (annualized USD). Salary is determined by location, education, knowledge, skills, competencies, experience, contract affordability, and organizational requirements.
Identity statement
As part of the hiring process, you may be asked to complete an identity verification process that uses biometrics and artificial intelligence to verify authenticity and prevent fraud. You may be on camera during interviews and assessments, and your picture may be used to verify identity.
Candidate AI usage policy
AI is part of Booz Allen's daily work, and the company promotes responsible and ethical use of AI tools. The candidate process is based on your skills and knowledge, and the use of AI tools to assist with interview responses is prohibited unless explicitly permitted.
Work model
Onsite: Work will primarily be performed at a Booz Allen office or customer facility, with collaboration across teams as required.
Hybrid: You may be expected to work from a Booz Allen facility frequently, in line with leadership expectations and role needs, and may visit customer facilities as required.
Remote: If listed as remote, there may be occasions when you are required to work in person at Booz Allen or customer facilities.
Commitment to non-discrimination
All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable laws.
