Security Automated Response Engineer

Overview

Your growth matters to us - explore our career development opportunities.

Be empowered to succeed. Connect with others in our people‑first culture and enhance our collective ingenuity.

Support your wellbeing. Learn how we’ll support you as you pursue a balanced, fulfilling life.

Discover what to expect during your journey as a candidate with us.

Display a strong background in security operations, threat detection, and security engineering. Be responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities, which enable the client to achieve measurable growth and maturity. Work with in‑house teams to identify the right mix of tools, techniques, and procedures to translate your customers’ needs and future goals into a plan that will enable secure and effective solutions.

Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs. Create technical solutions to identify security threats, enhance detection capabilities, and drive improvement in response efforts.

• 2+ years of experience building out security automation capabilities based on analyst requirements
• Experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms such as Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane
• Experience with threat intelligence solutions such as Threat
  
  Q, OpenCTI, or Analyst1
• Experience with programming using Python
• Experience with integrating solutions via APIs and creating custom apps or integrations
• Secret clearance
• HS diploma or GED

• Experience with Linux administration
• Experience with containerization technology such as Docker, Kubernetes, or Podman
• Experience with leveraging version control systems such as Git
• Experience with log management platforms such as the Elastic Stack or Splunk
• Experience supporting Defensive Cyber Operations
• Experience with integrating with AI systems
• Experience in DoW, Intelligence Community, or other regulated environments
• Knowledge of AI gateway security
• Knowledge of HTML, JS, CSS
• Knowledge of Zero Trust Architecture (ZTA) principles

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information;
Secret clearance is required.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.

Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

The projected compensation range for this position is $86,900.00 to $ (annualized USD). Salary determined by various factors including location, education, skills, and organizational requirements. This posting will close within 90 days from the posting date.

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.