DevSecOps Platform Security Engineer

Booz Allen; McLean (VA); On-site; USD 77,000 - 176,000; Full time

Job summary

Booz Allen Hamilton is seeking a Platform Security Engineer to strengthen secure software delivery pipelines in a federal defense context. You will integrate and automate security tools (SAST, DAST, SCA, container scanning) and harden IaC templates such as Terraform to meet DoW requirements.

You will collaborate with development, operations, and security teams, monitor for anomalies, drive zero trust adoption, support SSPs and continuous ATO, and help ensure compliant, resilient cloud and

Qualifications

• 5+ years of cybersecurity engineering experience, including DevSecOps in federal/defense environments.
• 3+ years of software engineering experience using Python, Typescript, or Bash and automation frameworks.
• 2+ years in AWS cloud and container orchestration (Kubernetes).
• Experience with AI software development tools and methodologies.
• Familiarity with Agile and Change Management practices.
• Knowledge of NIST SP 800-53 controls, RMF, STIGs, and SCAP tools.

Responsibilities

• Collaborate with development, operations, and security teams to secure software delivery.
• Monitor pipeline activity for anomalies and assist in incident response.
• Champion zero trust principles across the SDLC.

Skills

DevSecOps

Python

Typescript

Bash

AWS

Kubernetes

AI software development

Agile methodologies

RMF/NIST controls

Security clearance

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

Tools

Terraform

Stig Manager

eMASS

SCAP tools

Claude Code

Job description

Booz Allen Hamilton is seeking a Platform Security Engineer to strengthen secure software delivery pipelines in a federal defense context. You will integrate and automate security tools (SAST, DAST, SCA, container scanning) and harden IaC templates such as Terraform to meet DoW requirements.

You will collaborate with development, operations, and security teams, monitor for anomalies, drive zero trust adoption, support SSPs and continuous ATO, and help ensure compliant, resilient cloud and