Cloud Security Threat & Incident Response Lead

VulnU; McLean (VA); Vor Ort; USD 87.000 - 198.000; Vollzeit

Benefits dieser Stelle

Learning budget

Zusammenfassung

Booz Allen Hamilton in McLean, Virginia seeks a manager to lead cybersecurity cloud operations, threat detection, and incident response on AWS GovCloud. You will own detection, automate triage and response, and coordinate across cyber, platform, and governance teams in a production environment with DoD IL5 requirements.

Secret clearance preferred. You will drive improvements, mentor team members, and contribute to the security posture of critical national security workloads.

Qualifikationen

• 3+ years operating cloud security services in production.
• Experience with SIEM (Splunk), detection tuning, and alert triage.
• Experience executing incident response runbooks and leading incident calls.
• Automation of detection/triage with scripting or AI-enabled tooling.
• Knowledge of NIST SP 800-53 Rev. 5, NIST SP 800-61, FedRAMP High, and DoD Cloud Computing SRG.

Aufgaben

• Own detection and response on the AWS GovCloud platform.
• Develop and improve incident response runbooks.
• Assist on-call rotations and continuous monitoring evidence.
• Collaborate across cyber, platform, and governance teams.

Kenntnisse

Incident response

Threat detection

SIEM tuning

Automation scripting

Cloud security

Ausbildung

Bachelor's degree in Cybersecurity/CS/Engineering

Tools

Splunk

AWS GovCloud

Kubernetes (EKS)

Tenable ACAS

Jobbeschreibung

Booz Allen Hamilton in McLean, Virginia seeks a manager to lead cybersecurity cloud operations, threat detection, and incident response on AWS GovCloud. You will own detection, automate triage and response, and coordinate across cyber, platform, and governance teams in a production environment with DoD IL5 requirements.

Secret clearance preferred. You will drive improvements, mentor team members, and contribute to the security posture of critical national security workloads.