Cloud Cybersecurity Engineer

About the role

Booz Allen is looking for a Cloud Cybersecurity Engineer to help develop cloud-based security solutions for mission-critical systems of the Intelligence Community. The role evaluates and supports documentation, validation, assessment and accreditation processes so that IT systems meet Information Assurance and security requirements, and works with leaders to turn strategic objectives into doctrine and procedures.

Key responsibilities

• Evaluate and support documentation, validation, assessment and accreditation of IT systems against Information Assurance and security requirements.
• Help define the organization's preferred state and risk thresholds and analyze actual state information to assess compliance.
• Work with leaders to codify strategic objectives into doctrine and procedures.
• Evaluate computer applications, software and utility programs to check whether software assurance best practices are followed.
• Recommend tools and capabilities for on-premises, cloud and hybrid environments to address Risk Management Framework (RMF) requirements.
• Use cloud technologies to secure customers' environments while collaborating with future cloud security experts.

Required profile

• 1+ years of experience developing and evaluating security documentation such as system security plans, contingency plans, security test procedures and continuity of operations plans.
• 1+ years of experience with security architecture evaluations, guidance development and troubleshooting.
• 1+ years of experience with cloud service providers, including Amazon Web Services or Microsoft Azure.
• Top Secret clearance; applicants undergo a security investigation and must meet eligibility requirements for classified information.
• HS diploma, GEDIAT or IAM Level II DoD 8570 certification.

Required skills

• NIST RMF, NIST SP 800-53, FISMA or FEDRAMP.
• SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP or SCC tools.
• Managing security applications in AWS, Azure or Google Cloud and generating security analysis reports.
• Nice to have: 5+ years of cybersecurity experience, SDLC or DevSecOps, vulnerability scanning, penetration testing, containers or virtual machines, Agile, Xacta, Python scripting, application reverse engineering, and a Bachelor's degree in STEM.

What we offer

• Projected annual salary of $61,900 to $141,000 depending on experience, education and contract specifics.
• Health, life, disability, financial and retirement benefits, paid leave, professional development, tuition assistance, work-life programs and dependent care.
• A recognition awards program for exceptional performance.