Booz Allen Hamilton is seeking an Information Systems Security Engineer to help securely integrate emerging technologies across operational, research, and enterprise environments. In this Fort Meade, MD onsite role, you will support authorization and assessment activities using RMF, STIGs, and IAVM directives, while developing the cybersecurity artifacts needed to manage risk across system lifecycles.
Role Overview
You will identify and implement security controls, assessment tools, and authorization strategies to strengthen system risk posture. The work includes producing and maintaining RMF authorization packages, managing ATO processes, creating cybersecurity documentation such as SSPs, SARs, and POA&Ms, and coordinating vulnerability remediation efforts across project teams.
Responsibilities
- Guide and mentor professionals analyzing complex cybersecurity challenges, performing security assessments, and remediating vulnerabilities across diverse systems and architectures.
- Lead creation and ongoing maintenance of RMF authorization packages.
- Manage ATO processes.
- Oversee development of key cybersecurity artifacts, including system security plans and POA&Ms.
- Use tools such as ACAS, SCAP, and eMASS to evaluate system risks, support compliance with STIGs and IAVM directives, and help coordinate remediation.
- Embed cybersecurity best practices into AI development pipelines and integrate security across the system lifecycle.
- Collaborate with DevOps, Cloud Architects, AI/ML Engineers, and support continuous learning as technologies evolve.
Requirements
- Experience with Risk Management Framework (RMF), including creation and maintenance of authorization packages, ATOs, and re-authorizations.
- Experience conducting security assessments, vulnerability remediation, and continuous monitoring aligned with RMF.
- Experience with compliance scanning and VM tools, especially ACAS and SCAP.
- Experience implementing cybersecurity directives such as IAVM directives, CPUs, and STIGs.
- Experience updating and maintaining eMASS, including scan results, documentation, and evidence packages.
- Knowledge of system lifecycle management and procurement cybersecurity requirements.
- Ability to prepare and maintain cybersecurity documentation, including SSPs, SARs, and POA&Ms.
- Ability to analyze system architectures, hardware, and software designs to identify and mitigate security risks.
- TS/SCI clearance with a polygraph.
- Education and experience: HS diploma or GED with 6+ years of cybersecurity experience, or a Bachelor’s degree with 4+ years of cybersecurity experience.
Technologies
- Risk Management Framework (RMF)
- ACAS
- SCAP
- eMASS
- STIGs
- IAVM directives
- CPUs
- Python
- PowerShell
- Ansible
Nice If You Have
- Experience securing AI-enabled or ML-driven systems in mission contexts supporting AI capabilities across operational, research, and enterprise environments.
- Experience with cloud and hybrid architectures, particularly for securing AI workloads across varied computer environments.
- Experience with DevSecOps tooling, CI/CD security integration, and automated compliance workflows.
- Experience working with cross-functional AI and ML development teams for secure model training, deployment pipelines, and monitoring frameworks.
- Experience with secure software development or secure architecture design reviews.
- Experience with cybersecurity automation scripting using Python, PowerShell, or Ansible to support STIG automation, scanning pipelines, or IaC security controls.
- Knowledge of DoD-specific cybersecurity governance frameworks, mission workflows, and operational environments including USCYBERCOM or DoW environments.
Clearance
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance with polygraph is required.
Location and Work Model
- Location: Fort Meade, MD (onsite)
Compensation
Projected compensation range: $99,000.00 to $225,000.00 annually (annualized USD).
Benefits
- Health, life, disability, financial, and retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
- Recognition awards program acknowledging employees for exceptional performance and superior demonstration of company values
- Full-time and part-time employees working at least 20 hours per week on a regular basis are eligible to participate in Booz Allen’s benefit programs
- Individuals that do not meet the threshold are eligible for select offerings, not inclusive of health benefits
Identity Verification and Interview Requirements
- During the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
- You are expected to be on camera during interviews and assessments.
- Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
- AI is part of daily work at Booz Allen, with a focus on responsible and ethical use.
- The use of artificial intelligence (AI) or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.
