DoD Information Security Engineer: Cyber Risk & Defense

Booz Allen Hamilton; Fayetteville (NC); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Systems Security Engineer to help the DoD understand and mitigate cyber risks. You will lead the discovery of risks, translate security concepts for teams, and develop plans of action with task breakdowns across threat landscapes.

You will work with technologies like SIEM, vulnerability assessments, and network security, while supporting test plans and system requirements in Windows, Linux, VMware, and container environments.

Qualifications

• Experience with SIEM and OS security events (Windows/Linux).
• Experience with IA security policy, ATOs/ATCs, and cybersecurity tools (IDS/IPS/Firewalls/IAM).
• Experience with vulnerability assessments using Nessus.
• Experience developing test plans and technical system requirements.
• Experience with Windows, Linux, VMware, and containerization.
• Knowledge of SCAP and STIG hardening.
• TS/SCI clearance; Bachelor's degree.

Responsibilities

• Advise for the DoD and lead discovery of cyber risks.
• Understand policies and develop and implement mitigation plans.
• Oversee analysis of operational data to review threat landscape.
• Translate security concepts for teams to enable secure decision-making.
• Guide plan of action with task breakdown and risk remediation.

Skills

SIEM

Windows security

Linux security

Networking protocols TCP/IP/DNS/DHCP/

IA security policy

IDS/IPS/Firewalls

Vulnerability assessments

Nessus

Test plans

Windows administration

Linux administration

VMware

Containerization

SCAP/STIG

TS/SCI clearance

Education

Bachelor's degree

Tools

Nessus Vulnerability Scanner

VMware

Containerization

Splunk

Job description

Booz Allen Hamilton is seeking an Information Systems Security Engineer to help the DoD understand and mitigate cyber risks. You will lead the discovery of risks, translate security concepts for teams, and develop plans of action with task breakdowns across threat landscapes.

You will work with technologies like SIEM, vulnerability assessments, and network security, while supporting test plans and system requirements in Windows, Linux, VMware, and container environments.