Forescout Engineer

Booz Allen Hamilton; Reston (VA); On-site; USD 112,800 - 257,000; Full time

Job summary

Booz Allen Hamilton in Reston, VA, seeks a senior security engineer to implement and operate next-generation cyber defense tools for government and commercial clients. You’ll lead a team to evaluate, deploy, and run solutions that rapidly identify vulnerabilities and threats, and to develop effective countermeasures.

The role requires deep expertise in network engineering, Active Directory, system administration, and the ability to obtain required DoD 8570 certifications.

Qualifications

• 10+ years of systems administration experience on Windows or Linux
• Experience with ForeScout CounterACT deployment and maintenance
• Experience architecting IP networks and documenting topologies
• Experience with Active Directory and domain management
• Ability to obtain DoD 8570 IAT Level III certification within 30 days of start date
• Ability to obtain a DoD 8570 Cybersecurity Service Provider – Infrastructure Support certification within 30 days of start date
• Willingness to obtain TS/SCI clearance and polygraph

Responsibilities

• Develop relationships with other teams and communicate security concepts to senior management
• Manage infrastructure and cybersecurity controls including enhanced detection and event correlation in large enterprises
• Contribute to risk and vulnerability assessments using big-data analytics to identify threats or indicators of compromise

Skills

Systems administration

Network engineering

Active Directory

Education

Associate’s degree

Bachelor’s degree

Master’s degree

Tools

ForeScout CounterACT

Splunk

Job description

Role Overview

On our expert team, you’ll perform work focused on implementing and operating next‑generation security solutions for government and commercial clients. You’ll evaluate, implement, and operate leading security cyber defense tools and technologies and apply defense strategies to large and complex networks to rapidly identify vulnerabilities and threats, prioritize response actions, and develop effective countermeasures. You will lead a team as they engineer solutions to complex challenges for customers using knowledge of network engineering, Active Directory, and system administration.

Responsibilities

What You’ll Work On:

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Contribute to risk and vulnerability assessments in network, system, and application areas, and leverage big‑data analytics and traditional security event types to identify advanced threats or indicators of compromise.

Qualifications

You Have:

• 10+ years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades.
• Experience with the deployment or daily maintenance of ForeScout CounterACT appliances.
• Experience architecting and designing IP networks, including developing and documenting network topologies.
• Experience with network engineering, including physical or logical network configurations such as installation and activation of ports, configuration of switches, LANs, VLANs, and network firewalls or appliances, and network administration services such as Active Directory and domain management.
• Knowledge of multidomain architectures, including data center, WAN, and LAN in virtualized architectures.
• Active TS/SCI clearance and willingness to take a polygraph exam.
• Associate’s degree and 10+ years of experience supporting IT projects and activities, Bachelor’s degree and 8+ years of experience supporting IT projects and activities, or Master’s degree and 6+ years of experience supporting IT projects and activities.
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP, or Associate, GCED, GCIH, CCSP Certification within 30 days of start date.
• Ability to obtain a DoD 8570 Cybersecurity Service Provider – Infrastructure Support Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification within 30 days of start date.

Nice to Have

Nice If You Have:

• Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems.
• Ability to install and deploy ForeScout in a multidomain customer environment.
• Ability to integrate cybersecurity data using enterprise or custom data aggregation and analysis tools, including Splunk.
• Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation.
• Self‑starter, capable of working without considerable direction, and collaborates well in a team.
• Excellent verbal and written communication skills for coordinating efforts and establishing customer relations.
• ForeScout Certified Administrator (FSCA) or ForeScout Certified Engineer (FSCE) certifications.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Compensation & Benefits

Salary at Booz Allen is determined by various factors, including location, education, and experience. The projected compensation range for this position is $112,800.00 to $257,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package. This posting will close within 90 days from the Posting Date.

Benefits include health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Additional recognition awards program acknowledges employees for exceptional performance. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals not meeting the threshold are only eligible for select offerings, not inclusive of health benefits.

Equal Employment Opportunity

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.