B

Booz Allen

Builds AI and cyber systems for the US government

Cyber System Security Engineer Senior

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-time$99k - $225k /yrIn-person

About the Job

Requirements

  • At least 8 years of experience implementing, testing, and validating Security Technical Implementation Guides (STIGs), performing system self-assessments, and creating STIG checklists.
  • At least 8 years of experience executing Information Assurance Vulnerability Management (IAVM) actions, such as Information Assurance Vulnerability Alerts (IAVA), bulletins, or tasking orders, and developing compliant engineering responses.
  • At least 8 years of experience deploying and validating ESS, ACAS, and CMRS, analyzing ACAS scans, developing remediation strategies, and implementing patches and upgrades.
  • At least 8 years of experience reviewing cybersecurity and engineering change requests to ensure operational availability and compliance.
  • Knowledge of Department of Defense Tasking Orders and their application to networks and IT systems, such as Cisco routers, switches, Active Directory, or access control.
  • Ability to manage users in Windows or Linux and administer virtual machines in VMware or Hyper-V.
  • Ability to accredit and secure Department of Defense systems using the Risk Management Framework (RMF), perform IAVA analysis, document Plans of Action and Milestones (POA&Ms), and prepare security assessment artifacts.
  • Secret clearance is required.
  • A bachelor's degree in Science, Technology, or Engineering is required.
  • Security+ certification is required.

Responsibilities

  • Identify the tools, security systems, devices, and applications needed to assess vulnerabilities and recommend security solutions and strategies.
  • Develop and implement security solutions that protect military systems and infrastructure.
  • Support engineering, sustainment, and management of communications systems.
  • Perform ongoing system analysis activities for programs and risk assessments of systems and equipment.
  • Assist engineers in identifying solutions for vulnerabilities.
  • Create and map STIGs, submit change requests for system components, develop POA&Ms, and create documentation supporting RMF accreditations.
  • Perform vulnerability management using automated systems and respond to Department of Defense Tasking Orders (DTOs).
  • Brief technical security posture to client leadership and prepare brief slides and summaries of vulnerabilities.
  • Advise on preventing and mitigating future security threats.
  • Develop relationships with other teams and communicate security complexities to diverse audiences, including senior management.
  • Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
  • Perform risk and vulnerability assessments across network, system, and application areas, using big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
  • Participate in developing test strategies and conduct testing, validating, and implementing applicable STIG requirements for current or new systems.
  • Conduct periodic system self-assessments to ensure STIG compliance and create STIG checklists to support those assessments.
  • Perform IAVM activities, including vulnerability alerts, bulletins, and tasking orders, and develop a systematic approach for responding to IAVM-related issues to maintain system compliance.
  • Respond to, remediate, or mitigate system vulnerabilities in accordance with Department of Defense Tasking Orders or FRAGOs.

Desired Qualifications

  • Possession of strong verbal and written communication skills.
  • Top Secret clearance.
  • Cybersecurity certification, such as CISSP or Certified Ethical Hacker, or networking certification, such as Network+ or Cisco certification.

About the Company

Booz Allen

Builds AI and cyber systems for the US government

Booz Allen builds and runs technology for the U.S. government, mostly for the military and intelligence agencies, and its engineers work alongside consultants who know each agency's mission. In 1958, it helped the U.S. Navy create PERT, a project-scheduling method first used on the Polaris submarine missile program and later adopted across government and industry. Its teams design cyber defenses, AI and data tools, and battlefield communications, and it sells its own products, such as Vellox, a suite of AI tools that spot and fight off hackers. Agencies pay mainly through multi-year contracts that reimburse costs, bill hours, or set a fixed price. Booz Allen was founded in 1914 and is based in McLean, Virginia.

Company size
10,001+
Company stage
IPO
Headquarters
McLean, VA
Founded
1914

Recently Posted Jobs

Explore more opportunities at Booz Allen

See more jobs