Job Number: R0243956 Cloud Cybersecurity EngineerThe Opportunity: Everyone is trying to "harness the cloud," but not everyone knows how to secure it. As a cybersecurity engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. What if you could use your cloud security skills to improve mission-critical applications for the Intelligence Community (IC) We need you to help us develop cloud-based security solutions for some of the IC's most critical systems. As a cybersecurity engineer on our team, you'll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT)systems meet the organization's Information Assurance (IA)and security requirements. You'll assist in defining the organization's preferred state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to codify strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with the evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You'll recommend tools and capabilities based on your research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF)security requirements. Your technical experience will be vital as you work with our clients to ensure standards are met with information assurance and security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customers' environment while collaborating with tomorrow's cloud security experts. Join us. The world can't wait.You Have: 1+ years of experience developing and evaluating security documentation, including system security plans, contingency plans, security test procedures, and continuity of operations plans 1+ years of experience with security architecture evaluations, guidance development, and troubleshooting 1+ years of experience working with cloud service providers, including Amazon Web Services or Microsoft Azure Knowledge of the NIST RMF and NIST SP 800-53 Security and Privacy Controls, FISMA, or FEDRAMP Ability to use SD Elements, Fortify Static Code Analyzer, STIGs, ACAS, SCAP, or SCC Tools Ability to manage security applications within a Cloud Service Provider, including Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Ability to use cloud services or security applications to generate reports to conduct security analysis of processes and platforms Top Secret clearance HS diploma or GED IAT or IAM Level II DoD 8570 CertificationNice If You Have: 5+ years of experience in Cybersecurity Experience with the software development life cycle (SDLC) or DevSecOps Experience working with security applications to conduct enterprise vulnerability scanning Experience conducting penetration testing and working with Containers or Virtual Machines Experience with Agile Methodologies Knowledge of Xacta Ability to develop scripts, including Python, to test systems or automate security processes Ability to reverse engineer applications to develop security tests Bachelor's degree in Science, Technology, Engineering, or Mathematics IAT or IAM Level III DoD 8570 CertificationClearance:Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information;Top Secret clearance is required.CompensationAt Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include
