RMF & ATO Security Engineer; TS​/SCI

Information Systems Security Engineer

Are you looking for an opportunity to share your experience in system security engineering to help our country and assist our clients with critical missions? You'll ensure requirements are effectively integrated into the system through purposeful security architecture, design, development, and configuration. You will coordinate changes or modifications with the appropriate Information System Security Manager (ISSM) and implement and enforce all DoD cybersecurity policies and procedures, as defined by cybersecurity-related documentation.

You'll perform the documenting, monitoring, updating, and managing systems to maintain an acceptable security posture and to achieve an Interim Authority to Operate (IATO) and Authority to Operate (ATO).

You will support DoD and military clients in developing cutting‑edge cybersecurity solutions, including technical implementations, RMF, and analyzing policies. Assist in the development of solutions to complex problems with hybrid systems from a cybersecurity perspective. Works with minimal supervision within established procedures and practices.

With mentoring, challenging hands‑on problem‑solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect critical AI/ML networks for vital client missions and operations.

• 3+ years of experience guiding a client through the entire Risk Management Framework (RMF) and Authority to Operate (ATO) process
• Experience working as an Information System Security Engineer (ISSE), Information System Security Officer (ISSO), or in a related IT/CS cybersecurity role
• Experience conducting enterprise vulnerability scanning with tools such as ACAS, performing risk remediation, security control assessments, and integrating security principles to meet DoD directives and STIGs
• Experience achieving system certification, accreditation, assessment, and authorization, including IATT and ATOs
• Experience engineering, implementing, and hardening robust security solutions such as firewalls, IDS/IPS, and SIEM tools
• Understanding of systems and software engineering management processes applied to DoD acquisition life‑cycle phases
• Knowledge of DoD communication, cybersecurity, and IT systems
• TS/SCI clearance
• Associate’s degree with 7+ years in cybersecurity, bachelor’s degree with 3+ years in cybersecurity, or 9+ years in cybersecurity in lieu of a degree
• DoD 8140 IAT Level II Certification

• Experience with Dev Sec Ops
• Experience with Cloud technologies and environments such as AWS
• Experience with Agile methodologies
• Experience with operating systems including Linux, UNIX, Ubuntu, or Red Hat
• Ability to apply cyber‑security engineering methods to solution development life‑cycle activities
• Ability to research emerging technology and apply it to cutting‑edge problems
• Excellent presentation and collaboration skills
• Master's degree in Computer Science or Cybersecurity
• CISSP‑ISSEP, CCSP, or CISMC certification

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Salary at Booz Allen is determined by various factors, including location, education, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $77,500.00 to $ (annualized USD). Benefits include health, life, disability, financial, and retirement plans, paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible for Booz Allen’s benefit programs.

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.