Security Engineer, Senior

Job Number: R0250240

Everyone is trying to "harness the cloud", but not everyone knows how to secure it. As a cloud security architect, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. We need you to guide the development of cloud-based security architectures for some of the government's most critical data systems.

As a cloud security architect on our team, you'll integrate cybersecurity, authorization, compliance, and Dev Sec Ops  practices across cloud platforms, infrastructure, applications, data platforms, and CI/CD workflows. You'll help secure and authorize cloud-native environments, with a focus on AWS Gov Cloud and Databricks. You'll recommend tools and capabilities based on your research of the current environment and knowledge of various on-premises, cloud-based, and hybrid resources to address risk management framework (RMF).

Your technical expertise will be vital as you work with clients to ensure standards are met with information assurance and security requirements.

This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer's environment. You'll continue to strengthen your skills in automation, cloud-based security, data engineering, and AWS while mentoring tomorrow's cloud security experts.

Join us. The world can't wait.

• 5+ years of experience in security engineering, cloud security architecture, or securing large scale distributed systems
• Experience designing and implementing cloud security controls, monitoring strategies and threat detection capabilities, and supporting security metrics, incident response, rootcause analysis, and postincident improvements
• Experience securing workloads in AWS, including in regulated or sensitive cloud environments
• Experience with data platforms and data security, and scripting and automation using Python, Bash, or Go
• Experience with Infrastructure as Code such as Terraform
• Experience with SIEM, observability, and monitoring platforms such as Splunk, Elastic, Cloud Watch, Prometheus, or Open Telemetry, and containers and orchestration platforms such as Docker and Kubernetes
• Experience securing CI/CD pipelines and cloud native delivery processes
• Knowledge of cloud security, compliance frameworks, and production security best practices
• Public Trust
• Bachelor's degree

• Experience securing or modernizing government or financial systems
• Experience with event driven or streaming platforms such as Kafka, Confluent and AWS MKS
• Experience with chaos engineering or advanced reliability and fault injection practices
• Experience operating in multicloud or hybrid environments
• Experience tracking Authority to Operate milestones, control dependencies, risks, evidence needs, assessor actions, and POA&M remediation
• Professional level AWS Certifications such as AWS Security - Specialty Certification
• Security Certifications such as CISSP Certification

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client;
Public Trust determination is required.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week…