Booz Allen Hamilton’s Enterprise Cybersecurity (ECS) division helps strengthen cyber operations through automation and orchestration. In this role, you’ll focus on integrating and automating security tasks, supporting cybersecurity operations teams, and using SOAR to coordinate security systems. The position is onsite in McLean, VA, and requires U.S. citizenship due to the nature of the work performed.
Salary range: $69,400 to $158,000 per year. Compensation is determined based on factors such as location, education, knowledge, skills, competencies, experience, and contract-specific affordability and organizational requirements. This posting will close within 90 days from the posting date.
Responsibilities
- Support Booz Allen’s corporate Enterprise Cybersecurity (ECS) division as a key member of the team.
- Use established and new tools to integrate and automate security tasks that improve ECS team efficiency.
- Maintain existing integrations, automation, workflows, and documentation while expanding into areas that are not yet optimized.
- Leverage Python scripting and APIs to integrate security systems into the existing SOAR Platform.
- Handle feature requests, bug support, and provide technical engineering services related to automating and orchestrating the company’s security systems and solutions.
- Work directly with cybersecurity operations teams to capture requirements and design, develop, and support automation solutions that maximize operational efficiency for the cyber mission.
Requirements
- 3+ years of programming experience using Python, REST APIs, and SOAP APIs.
- 2+ years of experience with network and system management tools, including security management tools such as Splunk, CrowdStrike, Nitro, or ArcSight.
- 2+ years of experience building SOAR playbooks using platforms such as Splunk Phantom, Swimlane, and Simplify.
- Experience in security operations, incident response, threat management, or security engineering.
- Experience creating and executing test plans for new integrations and automations.
- Experience using cloud provider services such as AWS, Azure, or Google Cloud.
- Ability to identify and address opportunities to improve automation through refactoring, building, or adopting new tooling and technologies.
- Ability to develop innovative solutions that improve customer experience and to rapidly prototype and test solutions with production-level quality.
- HS diploma or GED.
Technologies
Python, REST APIs, SOAP APIs, Splunk, CrowdStrike, Nitro, ArcSight, Splunk Phantom, Swimlane, Simplify, AWS, Azure, Google Cloud, Splunk Enterprise, Elasticsearch, Logstash, Kibana, ELK, Elastic Stack, Docker, Kubernetes
Benefits
- Health, life, disability, financial, and retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
- Recognition awards program
- Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs
Nice If You Have
- Experience in Splunk Enterprise
- Experience with log management platforms such as Splunk, Elasticsearch, Logstash, Kibana, ELK, and Elastic Stack
- Experience with container services, including Docker and Kubernetes
- Bachelor’s degree
Work Model
Onsite: work will primarily be performed full-time at a customer facility, with collaboration as required by the role.
Identity Verification & Interview AI Policy
- Complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
- You are expected to be on camera during interviews and assessments.
- Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.
- The use of AI or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.
