Network Security Engineer

About the role

Booz Allen is hiring a Network Security Engineer in Dahlgren, VA, to support the United States Navy. The role identifies the cyber posture needed to assess vulnerabilities and recommends security strategies, developing and implementing security solutions that let the armed forces safely and securely administer modern technologies on tactical and deployed systems. It works with multiple Navy Warfare Centers to maintain a reliable cyber posture in classified and unclassified environments.

Key responsibilities

• Troubleshoot and analyze complex challenges for customers using network and cyber security best practices, automation tools and scripting.
• Assess security threats and implement infrastructure controls, mainly using Red Hat Enterprise Linux.
• Design and maintain a reliable cyber posture across systems deployed in classified and unclassified environments.
• Collaborate with systems engineers, software developers and cybersecurity experts to support the planning of acquisition, installation and configuration of Army systems under the Risk Management Framework (RMF).
• Work on TCP/IP, DMZs, firewalls, switches, Windows event logs, Linux syslogs and boot logs, and recommend network changes to mitigate known vulnerabilities.
• Develop analysis models supporting cybersecurity objectives, apply STIGs, and contribute to a System Security Administrator and Operators Manual.

Required profile

• Experience as a Linux and Windows systems engineer or administrator.
• Experience with HP-UX, UNIX, Solaris, Linux (such as RHEL or Ubuntu) and Microsoft Windows.
• Experience applying STIGs.
• Knowledge of encryption, VPNs, cross-domain issues, system hardening, networking concepts (IPv4, SSH, firewalls) and monitoring tools (ACAS Security Center, Evaluate STIG, STIG Viewer, Nessus Scanner).
• Secret clearance; applicants are subject to a security investigation and may need eligibility for classified information.
• HS diploma or GED.

Required skills

• Certifications such as Security+, CySA+, GSEC, SSCP, CND, GICSP or RHCSA are preferred.
• Nice to have: CI/CD pipelines and DevSecOps, threat intelligence platforms and incident response frameworks, a bachelor's degree, and DoD IAT Level III or IAM Level III certification.

What we offer

• Projected annual salary range of $69,300 to $158,000 depending on location, education, experience and contract terms.
• Health, life, disability, financial and retirement benefits, paid leave, tuition assistance and work-life programs for full-time and part-time employees working at least 20 hours per week.