Security Engineer, Senior

Security Engineer, Senior

The Opportunity:

Everyone is trying to “harness the cloud”, but not everyone knows how to secure it. As a cloud security architect, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. We need you to guide the development of cloud-based security architectures for some of the government’s most critical data systems.

As a cloud security architect on our team, you’ll integrate cybersecurity, authorization, compliance, and Dev Sec Ops  practices across cloud platforms, infrastructure, applications, data platforms, and CI/CD workflows. You’ll help secure and authorize cloud-native environments, with a focus on AWS Gov Cloud and Databricks. You’ll recommend tools and capabilities based on your research of the current environment and knowledge of various on-premises, cloud-based, and hybrid resources to address risk management framework (RMF).

Your technical expertise will be vital as you work with clients to ensure standards are met with information assurance and security requirements.

This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment. You’ll continue to strengthen your skills in automation, cloud-based security, data engineering, and AWS while mentoring tomorrow’s cloud security experts.

Join us. The world can’t wait.

You Have:5+ years of experience in security engineering, cloud security architecture, or securing large‑scale distributed systems Experience designing and implementing cloud security controls, monitoring strategies and threat detection capabilities, and supporting security metrics, incident response, root‑cause analysis, and post‑incident improvements Experience securing workloads in AWS, including in regulated or sensitive cloud environments

Experience with data platforms and data security, and scripting and automation using Python, Bash, or Go

Experience with Infrastructure‑as‑Code such as Terraform

Experience with SIEM, observability, and monitoring platforms such as Splunk, Elastic, Cloud Watch, Prometheus, or Open Telemetry, and containers and orchestration platforms such as Docker and Kubernetes Experience securing CI/CD pipelines and cloud‑native delivery processes Knowledge of cloud security, compliance frameworks, and production security best practices Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements

Bachelor's degree Nice If You Have:

Experience securing or modernizing government or financial systems

Experience with event‑driven or streaming platforms such as Kafka, Confluent and AWS MKS Experience with chaos engineering or advanced reliability and fault‑injection practices Experience operating in multi‑cloud or hybrid environments Experience tracking Authority to Operate milestones, control dependencies, risks, evidence needs, assessor actions, and POA&M remediation

Professional‑level AWS Certifications such as AWS Security - Specialty Certification Security Certifications such as CISSP Certification Vetting:

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.

Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values.…