Platform Security Engineer

# Platform Security Engineer Booz Allen Hamilton  
· boozallen.com Category:
Security Engineering

Location:

McLean, VASalary:
$77,600 – $176,000

Clearance:
Secret (ability to obtain)## Quality of life

What the posting states. Hover or tap a perk to see the line it came from.
* Learning budget

Platform Security Engineer

The Opportunity:

Apply your expertise in Dev Sec Ops  to integrate and enhance security into our software delivery pipelines. This role is instrumental in fortifying mission-critical systems and ensuring compliance with Department of War (DoW) cybersecurity mandates. You will serve as a technical expert, using secure development practices and delivering continuous improvement across our CI/CD ecosystem. You will evolve secure CI/CD pipelines by integrating and automating security tools such as SAST, DAST, SCA, and container scanning to meet DoW requirements and reduce operational risk.

You will continuously enhance Dev Sec Ops  pipelines by refining vulnerability detection thresholds, tuning scanners, reducing false positives, and optimizing remediation workflows. You will harden infrastructure-as-code (IaC) templates, including Terraform, and enforce policy-as-code across environments. You will conduct risk assessments and contribute to system security plans (SSPs) and continuous ATO efforts. You’ll collaborate with development, operations, and security teams to support secure software delivery.

You’ll monitor pipeline activity for anomalies and assist in responding to security incidents. You will champion zero trust principles and drive adoption across the SDLC. Join us. The world can’t wait.
You Have:5 years of experience in cybersecurity engineering, including with Dev Sec Ops  in federal or defense environments employing IaC/CaC, CI/CD, and SDLC concepts3 years of experience in software engineering using Python, Typescript, or Bash and automation frameworks2 years of experience implementing cybersecurity solutions in AWS cloud and container orchestration such as Kubernetes

Experience with AI software development, Claude Code, Codex, or Pi Experience using Agile and Change Management methodologies

Knowledge of best practice cybersecurity and threat-based cybersecurity frameworks, including AI/ML security best practices

Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools

Ability to obtain a Secret clearance HS diploma or GED Nice If You Have:

Experience reviewing code samples and applying whitelisting or exemption processes Experience developing Zero Trust security solutions for Dev Sec Ops  pipelines

Experience evaluating security tools and assessing fit for inclusion in Development or Operational environments

Knowledge of GRC engineering practices, including policy-as-code implementation, automated compliance validation, continuous control monitoring, security control mapping such as NIST 800-53, RMF, or CIS, risk assessment automation, POA&M management, audit evidence collection, compliance reporting, and integration of GRC requirements into CI/CD and Dev Sec Ops  workflows

Possession of excellent verbal, technical writing, and documentation skills

Secret clearance

Bachelor’s degree in Cybersecurity, Computer Science, or a related field

Security , AWS Solutions Architect, AWS Security, or CISSP Certifications Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development,…