Security Assessment And Authorization Cybersecurity Jobs

1 job found

Today

Information Systems Security Engineer

Booz Allen Hamilton Reston, VA

Reston, VA

Today

$99k - $225k/yr Full time Cloud Security Assurance Cyber Security Engineer

Apply Now

Job Description

In this role, you will help secure cloud-hosted information systems across the full lifecycle by engineering, implementing, and assessing security controls. You will work with stakeholders across cloud, cybersecurity, risk management, and assessment and authorization to convert security requirements into practical designs that support authorization decisions.

Key Responsibilities

Engineer, implement, and assess security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and assessment and authorization requirements.
Translate security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Develop and maintain A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Assess control implementation and effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
Apply Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
Perform security engineering across requirements analysis, architecture reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Support security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring activities.
Communicate security risks, decisions, compliance status, remediation plans, and technical recommendations to program stakeholders.

Required Qualifications

8+ years of experience in information systems security engineering, cloud security, or cybersecurity.
Experience engineering, implementing, and assessing security controls for cloud-hosted information systems aligned to RMF, ICD 503, NIST guidance, and assessment and authorization processes.
Experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities.
Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, security assessment plans, POA&Ms, continuous-monitoring plans, and evidence packages.
Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
Experience performing security engineering across the system lifecycle.
Ability to assess control effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
TS/SCI clearance; willingness to take a polygraph exam.
Bachelor’s degree.

Technologies

RMF
ICD 503
NIST
Zero Trust
Least privilege
Defense in depth
Segmentation
Encryption
Auditability
Terraform
OCI Resource Manager
Ansible
SIEM
SOAR

Nice to Have

Experience supporting classified, Government, or highly regulated information systems.
Experience with vulnerability management, configuration compliance, SIEM, SOAR, endpoint security, or cloud security posture management tools.
Experience with infrastructure as code and automated security configuration using Terraform, OCI Resource Manager, Ansible, APIs, or scripting.
Experience supporting authorization packages, control validation, audit readiness, remediation tracking, or continuous monitoring in an agency environment.
Possession of strong written and verbal communication skills.
Associate or Professional level security, architecture, networking, or cloud operations certification.

Work Model and Location

Reston, VA (onsite). Work will primarily be performed full-time at a customer facility, with collaboration as required by the role.

Clearance

Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required.

Compensation

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Benefits

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program acknowledging employees for exceptional performance and superior demonstration of company values
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen benefit programs
Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits

Identity Verification and Interview Policy

You will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
You are expected to be on camera during interviews and assessments.
The company reserves the right to take your picture to verify your identity and prevent fraud.
The use of artificial intelligence (AI) or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

View full job page →

Get Security Assessment And Authorization Cybersecurity Jobs alerts

New Security Assessment And Authorization Cybersecurity Jobs, daily.