Enterprise Cybersecurity Automation Engineer

Booz Allen Hamilton; McLean (VA); Hybrid; USD 86,800 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Enterprise Cybersecurity Automation Engineer to design, develop, and support automation solutions that scale security operations and reduce risk. You will integrate security systems via Python and APIs, maintain existing workflows, and collaborate with defense teams to capture requirements for production‑level automation.

The role emphasizes hands‑on scripting, SOAR playbooks, and refining automation to maximize operational efficiency across Booz Allen's ECS

Qualifications

• 4+ years of experience programming with Python, REST APIs, and SOAP APIs.
• 3+ years experience with network and system management tools, including security management tools such as Splunk, Carbon Black, CrowdStrike, Nitro, or ArcSight.
• 3+ years experience with playbook development using SOAR platforms, including Swimlane, Phantom, ServiceNow, Tines, or Demisto.
• Experience with security operations, incident response, threat management, or security engineering.
• Experience using cloud provider services, including AWS, Azure, or Google Cloud.
• Ability to create and execute test plans for new integrations and automation.
• Ability to identify and address areas where automation can be improved by refactoring, building, or adopting new tooling and technologies.
• Ability to develop innovative solutions to improve customer experiences and rapidly prototype and test solutions with production‑level quality.
• Ability to obtain a Secret clearance.
• Bachelor’s degree

Responsibilities

• Manage and maintain current integrations and automation workflows; develop and refine automation scripts.
• Collaborate with security operations teams to capture requirements and design new solutions.
• Provide technical support for feature requests and bug resolution.
• Create and execute test plans; identify and recommend automation improvements.
• Prototype innovative solutions that meet production‑level quality.

Skills

Python scripting

REST APIs

SOAP APIs

Security operations

Threat management

Cloud services

Test plans

Automation improvement

Innovative solutions

Secret clearance

Education

Bachelor’s degree

Tools

Splunk

Carbon Black

CrowdStrike

Nitro

ArcSight

Swimlane

Phantom

ServiceNow

Tines

Demisto

AWS

Azure

Google Cloud

Job description

Job Number: R0244221

Enterprise Cybersecurity Automation Engineer

Cyber threats are everywhere, and the adversary’s tradecraft is constantly evolving. Stopping attackers demands that we consume more data, act with greater speed, and take decisive action. Our cyber defenders need to be armed with the right tools at their disposal and have actionable information to be successful in carrying their mission. Every second counts when an attacker is actively targeting the company and its clients. How do we keep pace? How do we scale? How do we protect the company and its clients? The answer is you – help us develop security automation solutions that provide immense scale and precision that enable us to rise to the challenge of countering threats and reducing risk.

Play a key role as part of Booz Allen’s corporate Enterprise Cybersecurity (ECS) division. Use established and new tools to integrate and automate tasks to improve the efficiency of ECS teams. You’ll manage and maintain existing integrations, automation, workflows, and documentation while working to expand into areas that have not been optimized. You’ll use knowledge of Python scripting and Application Programming Interfaces (APIs) to integrate security systems into the existing SOAR Platform. You’ll be responsible for feature requests, bug support, and provide technical engineering services in support of automating and orchestrating the company’s security systems and solutions. Directly support the cybersecurity operations teams to capture requirements to design, develop, and support the company’s automation solutions that will ensure maximized operational efficiency in support of the cyber mission.

Responsibilities

You’ll manage and maintain current integrations and automation workflows; develop and refine automation scripts; collaborate with security operations teams to capture requirements and design new solutions; provide technical support for feature requests and bug resolution; create and execute test plans; identify and recommend automation improvements; and prototype innovative solutions that meet production‑level quality.

Qualifications

• 4+ years of experience programming with Python, REST APIs, and SOAP APIs
• 3+ years experience with network and system management tools, including security management tools such as Splunk, Carbon Black, CrowdStrike, Nitro, or ArcSight
• 3+ years experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms, including Swimlane, Phantom, ServiceNow, Tines, or Demisto
• Experience with security operations, incident response, threat management, or security engineering
• Experience using cloud provider services, including AWS, Azure, or Google Cloud
• Ability to create and execute test plans for new integrations and automation
• Ability to identify and address areas where automation can be improved by refactoring, building, or adopting new tooling and technologies
• Ability to develop innovative solutions to improve customer experiences and rapidly prototype and test solutions with production‑level quality
• Ability to obtain a Secret clearance
• Bachelor’s degree

Nice to Have

• Experience with log management platforms such as Splunk, Elasticsearch, Logstash, Kibana – ELK, and Elastic Stack
• Experience with container services, including Docker and Kubernetes
• Experience with Linux administration

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. Salary is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability and organizational requirements. The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Work Model

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.