Cybersecurity Engineer

Booz Allen Hamilton; Colorado Springs (CO); On-site; USD 86,800 - 198,000; Full time

Job summary

Booz Allen Hamilton seeks a Cybersecurity Engineer to apply technical expertise for defense operations, strengthening secure systems across on‑premises and cloud platforms with secure‑by‑design practices.

You’ll support accreditation activities, RMF lifecycle tasks, and collaboration with operators and developers to secure mission-critical systems. A Top Secret clearance and a bachelor’s degree are required.

Qualifications

• 3+ years of cybersecurity engineering or related experience.
• Experience with on-premises and cloud security controls and conducting vulnerability assessments.
• Experience supporting RMF lifecycle activities (IATT, ATO sustainment, POA&M).
• Knowledge of cloud platforms (AWS, Azure, or DoD).
• Knowledge of Windows/Linux hardening, vulnerability scanners, SIEM, and log analysis.
• Ability to analyze logs, triage cyber events, and support defensive cyber operations.
• Ability to operate with minimal direction and mentor junior team members.
• Top Secret clearance.
• Bachelor’s degree.
• Security+ certification.

Responsibilities

• Strengthen secure systems across on‑premises and cloud environments.
• Apply secure‑by‑design practices and assess evolving risks.
• Support accreditation activities and RMF lifecycle processes.
• Collaborate with operators, system owners, and development teams to secure essential systems.
• Inform leadership on system posture and defensive priorities.
• Analyze evolving techniques affecting mission‑critical systems and support readiness.

Skills

Defensive cyber operations

Vulnerability assessment

RMF lifecycle

Cloud security

Windows/Linux hardening

Log analysis

Mentor teammates

Top Secret clearance

Security+ Certification

Education

Bachelor’s degree

Security+ Certification

Tools

Python

PowerShell

Bash

Vulnerability scanners

SIEM platforms

Job description

Your growth matters to us - explore our career development opportunities.

BE EMPOWERED TO SUCCEED

Connect with others in our people-first culture and enhance our collective ingenuity.

SUPPORT YOUR WELLBEING

Learn how we’ll support you as you pursue a balanced, fulfilling life.

YOUR CANDIDATE JOURNEY

Discover what to expect during your journey as a candidate with us.

As a cyber mission specialist, you apply technical expertise, mission‑focused security engineering, and innovative thinking to strengthen secure systems supporting defense operations. You enhance protections for complex environments across on‑premises and cloud platforms, apply secure‑by‑design practices, evaluate risks, and support continuous cybersecurity readiness.

In this role, you understand cyberspace capabilities, identify weaknesses, and assess mitigations for enterprise and cloud technologies. You leverage cybersecurity tools and monitoring platforms to evaluate findings, aggregate risk insights, and inform leadership on system posture and defensive priorities.

You use research, engineering, and analytic skills to assess evolving techniques affecting mission‑critical systems. You support accreditation activities, strengthen command‑and‑control capabilities, and collaborate with operators, system owners, and development teams to secure essential systems.

If you thrive in high‑impact environments and enjoy working closely with mission stakeholders to secure systems that matter, this opportunity lets you make a tangible difference.

Join us. The world can't wait.

Cybersecurity Engineer

The Opportunity:

As a cyber mission specialist, you apply technical expertise, mission‑focused security engineering, and innovative thinking to strengthen secure systems supporting defense operations. You enhance protections for complex environments across on‑premises and cloud platforms, apply secure‑by‑design practices, evaluate risks, and support continuous cybersecurity readiness.

In this role, you understand cyberspace capabilities, identify weaknesses, and assess mitigations for enterprise and cloud technologies. You leverage cybersecurity tools and monitoring platforms to evaluate findings, aggregate risk insights, and inform leadership on system posture and defensive priorities.

You use research, engineering, and analytic skills to assess evolving techniques affecting mission‑critical systems. You support accreditation activities, strengthen command‑and‑control capabilities, and collaborate with operators, system owners, and development teams to secure essential systems.

If you thrive in high‑impact environments and enjoy working closely with mission stakeholders to secure systems that matter, this opportunity lets you make a tangible difference.

Join us. The world can't wait.

You Have:

• 3+ years of experience in cybersecurity engineering, defensive cyber operations, or system security

• Experience implementing and maintaining security controls for on‑premises and cloud environments and conducting vulnerability assessments, STIG compliance, system hardening, and continuous monitoring

• Experience supporting RMF lifecycle activities, including IATT, ATO sustainment, and POA&M development

• Knowledge of cloud security concepts, architectures, and best practices across AWS, Azure, or DoD cloud platforms

• Knowledge of Windows or Linux system hardening and Vulnerability scanners, SIEM platforms, endpoint protection, and log analysis tools

• Ability to analyze logs, triage cyber events, and support defensive cyber operations

• Ability to operate with minimal direction and mentor junior team members

• Top Secret clearance

• Bachelor’s degree

• Security+ Certification

Nice If You Have:

• Experience working with eMASS, Xacta, STIG Viewer, SCAP, or ATO packages

• Experience supporting RMF assessments for cloud environments

• Experience automating security tasks using Python, PowerShell, or Bash

• Knowledge of boundary defense, enclave security, hybrid cloud architecture, and defense network environments

• Knowledge of application security and secure‑by‑design development practices

• Ability to guide development teams in secure‑by‑design practices

• Ability to automate security workflows across on‑premises and cloud environments

• CySA+, CASP+, CISSP, GSEC, CCSP, AWS Security Specialty, or Azure Security Engineer Associate Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability and organizational requirements. The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in‑person or virtual) is prohibited unless permission is explicitly provided.

Work Model
Our people‑first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.

• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.

• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.