Information Systems Security Engineer Job Reston area,Virginia USA,IT/Tech

The Opportunity:

Security is most effective when it is part of system design from the beginning. As an Information Systems Security Engineer, you’ll help design, implement, and assess security controls that protect cloud-hosted information systems throughout their lifecycle.

Job Number: R0250235 Information Systems Security Engineer What You’ll Work On:

Engineer, implement, and assess security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and assessment and authorization requirements.
Translate security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Develop and maintain A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Assess control implementation and effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
Apply Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
Perform security engineering across requirements analysis, architecture reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Support security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring activities.
Communicate security risks, decisions, compliance status, remediation plans, and technical recommendations to program stakeholders.

Join us. The world can’t wait.

You Have:

8+ years of experience in information systems security engineering, cloud security, or cybersecurity
Experience engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and assessment and authorization processes
Experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, or privileged-access capabilities
Experience translating security requirements, system architectures, data flows, or mission use cases into implementable technical controls and documented security designs
Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, security assessment plans, POA&Ms, continuous-monitoring plans, or evidence packages
Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, or secure configuration practices
Active TS/SCI clearance; willingness to take a polygraph exam
Bachelor’s degree

Nice If You Have:

Experience supporting classified, Government, or highly regulated information systems
Experience with vulnerability management, configuration compliance, SIEM, SOAR, endpoint security, or cloud security posture management tools
Experience with infrastructure as code and automated security configuration using Terraform, OCI Resource Manager, Ansible, APIs, or scripting
Experience supporting authorization packages, control validation, audit readiness, remediation tracking, or continuous monitoring in an agency environment
Possession of strong written and verbal communication skills
Associate or Professional level security, architecture, networking, or cloud operations Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and…