Enterprise Cyber Security Senior Manager

VulnU; Reston (VA); On-site; USD 143,000 - 266,000; Full time

Benefits offered by this job

Learning budget

Job summary

Booz Allen Hamilton in Reston, VA seeks a Senior Manager to lead enterprise cyber security initiatives across multiple projects. You will drive architectural direction, oversee lifecycle from design to deployment, and mentor senior engineers to improve zero-trust posture and regulatory compliance.

The role requires deep expertise in network security, SIEM/SOAR, EDR/XDR, cloud and virtualization, with strong leadership in complex, regulated environments.

Qualifications

• Experience as lead architect or chief engineer on large programs.
• Experience delivering enterprise security solutions in regulated federal environments.
• Knowledge of multiple domains: network security, SIEM/SOAR, EDR/XDR, cloud security, and ZTNA.

Responsibilities

• Define technical roadmap and architecture across multiple cyber engineering projects.
• Oversee end-to-end lifecycle of cyber tools and platforms.
• Lead engineering teams and enforce design standards and technical debt management.
• Ensure compliance with authorization and regulatory requirements across programs.

Skills

Lead architect

Enterprise security

Zero trust

SIEM/SOAR

Cloud security

Education

Bachelor's degree in cybersecurity or related field

Tools

VMware

Kubernetes

AWS/Azure

Job description

# Enterprise Cyber Security Senior ManagerBooz Allen Hamilton · boozallen.comCategory: Security LeadershipLocation: Reston, VA · McLean, VALevel: ManagerSalary: $142,900 – $266,000Clearance: TS/SCI + Poly## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Learning budgetEnterprise Cyber Security Senior ManagerThe Opportunity:Join a dynamic, mission-focused team We are seeking a Deputy Chief Engineer to serve as the senior technical authority and platform modernization lead for a large-scale, mission-critical defensive security engineering program. This individual will own the end-to-end technical vision, enforce architectural discipline across integrated security platforms, and drive measurable improvements in the program's customer’s zero trust posture, operational resilience, and compliance standing. As the Deputy Chief Engineer, you will bring deep technical range across network security, endpoint, SIEM, virtualization, and cloud infrastructure, and convert that expertise into defensible architectural decisions that hold up under acquisition scrutiny, regulatory audits, and mission pressure. This is a technical leadership role. You will set direction, resolve ambiguity, and elevate the engineering capability of the team around you. Work with peers and leaders to innovate, mentor, and grow the business.What You'll Do:Serve as the primary technical authority for 20 interconnected cyber engineering projects, and define the technical roadmap, engineering standards, and system architecture across multiple isolated and interconnected network fabrics.Drive the end-to-end engineering lifecycle (design, procurement, testing, implementation, deployment, and sustainment) of next-generation cyber tools. Manage distinct engineering teams organized around Zero Trust pillars to ensure a cohesive, unified security posture.Establish robust engineering practices for the long-term maintenance, patching, upgrading, and optimization of deployed cyber tools across all network fabrics. Establish and enforce architecture review processes, design standards, and technical debt management practices across all program workstreamsDevelop and maintain the program's integrated enterprise architecture roadmap, ensuring alignment across security domains, platform layers, and operational requirementsLead architectural trade-off analyses that weigh capability, schedule, cost, and opportunity cost, producing decision-quality artifacts for senior stakeholder consumptionDrive platform modernization roadmaps with clear sequencing logic, risk identification, and dependency mappingProvide technical oversight across SIEM/SOAR deployment and tuning, endpoint detection and response (EDR/XDR) platforms, network segmentation and micro-segmentation architectures, and cloud and virtualization infrastructure.Ensure interoperability and coherent design across hybrid environments including on-prem, cloud, such as IaaS/PaaS, and virtualized infrastructure stacks.Identify and resolve integration risks early in the design cycle; engage vendors and government stakeholders on technical feasibility and alternative approaches.Maintain situational awareness of emerging tools, frameworks, and threat intelligence relevant to the program's security mission.Ensure all technical work products meet quality standards and are traceable to customer requirements, contract deliverables, and applicable control frameworks.Ensure technical solutions meet ATO requirements from design through delivery — avoiding rework-intensive compliance gaps late in the delivery lifecycle.Champion engineering rigor, documentation discipline, and a culture of continuous improvement across the program.Lead, mentor, and develop a team of senior engineers and architects — building expertise.Translate complex technical challenges into clear direction for engineering teams; serve as a decision-forcing function when ambiguity slows execution.Represent the program's technical capability in executive briefings, customer engagements, and competitive positioning activities.Join us. The world can't wait.You Have:5 years of experience serving as a lead architect, chief engineer, or operator on programs of record with multi-year, multi-million-dollar scopeExperience delivering enterprise security solutions in highly regulated federal environments, such as DoD, IC, or civilian agencyExperience in delivery across at least three of the following domains: network security architecture, SIEM/SOAR, EDR/XDR, cloud security, virtualization security such as VMware, and zero trust network access (ZTNA)Knowledge of federal contract structures, such as T&M, FFP, or CPFF and the technical implications of each model on scope, risk, and architectural decision-makingActive TS/SCI clearanceBachelor’s degree and 10 years of experience in cybersecurity engineering or architecture, or 12 years of experience in cybersecurity engineering or architecture in lieu of a degreeNice If You Have: Experience in network security design including segmentation, NAC, secure DNS, and perimeter-to-interior trust model evolution, and security architecture frameworks such as SABSA, TOGAF, or equivalent, and their application to defense or IC programsExperience with enterprise Security Operations Center (SOC) architecture, SIEM content engineering, and detection engineering programsExperience in program capture support, including contributing to technical volumes, verbals preparation, or architecture demos for competitive pursuitsKnowledge of CMMC, ICD 503, DISA STIGs, and applicable IA policy frameworksKnowledge of AI/ML applications in cyber operations and their implications for platform architecture and data pipeline designTS/SCI clearance with a polygraphMaster's degreeDoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification such as CEH, CySA , GICSP, SSCP, CHFI, CFR, Cloud , or CND CertificationDoD 8570/8140 IAT Level III certification such as SecX, CCNP, CISA, CISSP, GCED, GCIH, or CCSPCloud security certifications such as AWS Security Specialty or Azure Security EngineerClearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.CompensationAt Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $142,900.00 to $266,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.Identity StatementAs part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.Candidate AI Usage PolicyAI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.Work ModelOur people-first culture prioritizes the benefits of collaboration. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role.Onsite: If this position is listed as onsite, work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.Commitment to Non-DiscriminationAll qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.