RMF Cybersecurity Engineer
Booz Allen Hamilton
About the Role
As a systems security and network security engineer, you will identify the NIST controls and documentation needed to assess vulnerabilities and recommend the best solution and security strategy. You will lead the development and implementation of security solutions that enable communications between nations and allow for multi-national exercises and collaboration. On the team, you will troubleshoot and analyze complex challenges for customers using your knowledge of Cybersecurity requirements. You will use your curiosity for technology and market trends to further research and develop security solutions. Using your knowledge and experience in ACAS, eMASS, and NIST 800-53, you will assess security threats and implement infrastructure controls. In this role, you will closely impact mission partner collaboration by driving scans, analyzing policies, and assisting mission partners with connectivity.
Key Responsibilities
- Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
- Implement infrastructure and cyber security controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
- Perform risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
Requirements & Tech Stack
- Experience assessing, auditing, configuring, and authorizing information systems.
- Knowledge of cybersecurity, system administration, compliance and vulnerability assessments, Risk Management Framework, eMASS, NIST 800-53, and r5.
- Knowledge of Assured Compliance Assessment Solution (ACAS).
- Ability to determine solutions to challenging and evolving cybersecurity requirements.
- Secret clearance.
- HS diploma or GED.
- IAT Level II 8570 Certification such as Security+, CySA+, SSCP, GSEC, CND, or CICSP.
Nice to Have
- Experience as an Information System Security Officer.
- Knowledge of a critical agency’s processes or procedures.
- Ability to understand complex regulatory jargon.
Compensation
- Projected compensation range: $99,000.00 to $225,000.00 (annualized USD).
Work Model
- The specific work model (Remote, Hybrid, or Onsite) will be detailed in the job posting.