Apply on Employer Site

Booz Allen Hamilton · 1 day ago

Information System Security Engineer, Senior

Lexington, MA

Full-time

Hybrid

Senior Level

$78K/yr - $176K/yr

5+ years exp

Booz Allen Hamilton is a leading consulting firm that specializes in providing innovative solutions to the Department of Defense. They are seeking a Senior Information System Security Engineer to maintain responsibility for all ISSE duties, support the DoD Risk Management Framework, and apply systems security engineering principles to enhance cybersecurity measures.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Maintain responsibility for all Information Systems Security Engineer (ISSE) duties in support of Department of Defense (DoD) Risk Management Framework (RMF) and Intelligence Community Directive (ICD) 503

Leverage knowledge of National Institute of Standards and Technology (NIST) Special Publication 800-53 security controls and the Committee on National Security Systems Instruction 1253

Apply systems security engineering or architecture principles in support of the DoD RMF such as the specification, design, development, implementation, and modification of information system components

Select, tailor, and implement NIST SP 800-53 security controls in support of RMF Assessment and Authorization (A&A) requirements

Develop layered protections and establish cybersecurity Standard Operating Procedures (SOPs) or guidelines in support of security engineering practices for the organization’s authorization boundary

Understand and apply system development lifecycle principles, including Agile or Waterfall, and perform duties such as delineating physical and logical security boundaries, ensuring that software developers are trained on how to build secure software, running security vulnerability scans, specifically with the DoD’s Assured Compliance and Assessment Solution (ACAS) while generating and interpreting vulnerability scans, implementing Security Technical Implementation Guidelines (STIGs) and CIS Benchmarks, and other duties associated with RMF Continuous Monitoring, including remediating or mitigating findings and vulnerabilities on system POA&Ms

Qualification

Information Systems Security EngineeringNIST SP 800-53STIGsCIS BenchmarksDoD Continuous MonitoringAgile methodologyWaterfall methodologyEMASSXactaTenable NessusDevSecOpsCybersecurity SOPsBachelor's degreeMaster's degree

Required

5+ years of experience as an Information Systems Security Engineer

5+ years of experience implementing defense in-depth solutions and developing cybersecurity Standard Operating Procedures (SOPs) or guidelines in support of security engineering practices for the organization's authorization boundary

4+ years of experience employing system development lifecycle principles using Agile or Waterfall methodologies

4+ years of experience with DoD Continuous Monitoring procedures

3+ years of experience implementing STIGs and CIS Benchmarks

3+ years of experience utilizing and operating security tools, including Tenable Nessus and Security Center

3+ years of experience with A&A package development in eMASS or Xacta

Top Secret clearance

Bachelor's degree

Preferred

Experience applying DevSecOps into all phases of the software development lifecycle

Experience in USCYBERCOM or the Intelligence Community

Master's degree in Cybersecurity, Information Systems Management, Computer Engineering, Mathematics, Physics, Electrical Engineering, Mechanical Engineering, or Software Engineering