Platform Security Engineer — DevSecOps & Learning Budget

VulnU; McLean (VA); On-site; USD 78,000 - 176,000; Full time

Benefits offered by this job

Learning budget

Job summary

Booz Allen Hamilton in McLean, VA is seeking a Platform Security Engineer to advance secure software delivery across CI/CD pipelines. You will integrate security tooling (SAST, DAST, SCA, container scanning), harden IaC templates, and support ATO processes in a DoW-aligned setting.

Required 5 years in cybersecurity engineering, 3+ years coding (Python/Typescript/Bash), and 2+ years with AWS and Kubernetes. A security mindset and strong collaboration are essential.

Qualifications

• Minimum 5 years in cybersecurity engineering with DevSecOps in federal or defense settings.
• 3+ years software engineering experience using Python, Typescript or Bash and automation.
• 2+ years implementing cybersecurity in AWS and Kubernetes environments.
• Familiarity with DoW cybersecurity mandates, RMF, and policy-as-code concepts.
• Strong written and verbal communication with ability to document security controls.

Responsibilities

• Integrate security into software delivery pipelines and CI/CD tooling.
• Tune vulnerability scanners, reduce false positives, and improve remediation workflows.
• Harden IaC templates (Terraform) and enforce policy-as-code across environments.
• Perform risk assessments and contribute to SSPs and continuous ATO efforts.
• Collaborate across teams to enable secure software delivery and zero trust adoption.

Skills

DevSecOps

Cybersecurity engineering

Python/Typescript/Bash

AWS cloud

Kubernetes

AI security

Agile methodologies

NIST SP 800-53 / RMF

Policy-as-code

Education

HS diploma or GED

Bachelor’s degree in Cybersecurity or Computer Science

Certifications (Security+, CISSP, AWS AA/SANS)

Tools

Terraform

SAST/DAST

SCA and container scanning

eMASS / STIG tools

SCAP tooling

Job description

Booz Allen Hamilton in McLean, VA is seeking a Platform Security Engineer to advance secure software delivery across CI/CD pipelines. You will integrate security tooling (SAST, DAST, SCA, container scanning), harden IaC templates, and support ATO processes in a DoW-aligned setting.

Required 5 years in cybersecurity engineering, 3+ years coding (Python/Typescript/Bash), and 2+ years with AWS and Kubernetes. A security mindset and strong collaboration are essential.