Security Engineer

Booz Allen Hamilton; Maryland; On-site; USD 112,800 - 257,000; Full time

Benefits offered by this job

Health benefits

Professional development

Tuition assistance

Job summary

Booz Allen Hamilton is seeking a technical professional in cybersecurity to design, build, and maintain systems that protect organizational data and infrastructure from cyber-attacks. The ideal candidate will have over 6 years of experience with Elastic Stack and be experienced in conducting penetration tests and security audits. A Secret clearance is required. The position offers a competitive compensation package, including benefits and professional development opportunities.

Qualifications

• 6+ years of experience in cybersecurity, particularly with Elastic Stack.
• Experience in a DoD, IC, or federal cybersecurity environment.
• Secret clearance required.

Responsibilities

• Design and deploy security systems to protect data and networks.
• Conduct regular penetration tests and security audits.
• Lead the response to security breaches.

Skills

Elastic Stack administration

Penetration testing

Identity and Access Management

Security audits

Log ingestion pipeline design

Education

HS diploma or GED

Tools

Elasticsearch

Kibana

Logstash

Job description

We need a technical professional responsible for designing, building, and maintaining systems that protect an organization’s data, networks, and IT infrastructure from cyber-attacks. In this position, you will focus on proactive defense by creating secure architectures and automated defenses.

What You’ll Work On

• Design and deploy firewalls, intrusion detection systems or intrusion prevention systems (IDS/IPS), and encryption protocols.
• Conduct regular penetration tests and security audits to identify and patch system weaknesses.
• Perform Identity and Access Management (IAM), including implementing policies to ensure only authorized users can access sensitive company data.
• Lead or assist in the technical response to security breaches, including digital forensics and damage mitigation.
• Create and enforce company-wide security standards such as password management and data classification.
• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Lead risk and vulnerability assessments in network, system, and application areas.
• Leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.

You Have

• 6+ years of experience administering Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, or Fleet.
• Experience managing Elasticsearch index lifecycle policies, index templates, and data streams at scale, and building Kibana dashboards, visualizations, and lens-based analytics for security operations.
• Experience with Elastic Security detection rules, alerts, and case management workflows.
• Experience with log ingestion pipeline design, including parsing, enrichment, and normalization across heterogeneous log sources such as network, endpoint, identity, and cloud.
• Experience with Elastic Common Schema (ECS) and mapping non-standard log sources into ECS‑compliant fields.
• Experience with ES|QL or EQL for advanced threat hunting and detection‑as‑code workflows.
• Experience working in a DoD, IC, or federal cybersecurity environment such as SOC, SIEM operations, or defensive cyber.
• HS diploma or GED.
• Secret clearance.

Nice If You Have

• Experience building SOAR‑related automation around Elastic, including webhook actions, connector integrations, or n8n / XSOAR orchestration.
• Experience with Elastic's transforms and runtime fields for creating enriched security datasets and risk scoring indices.
• Experience with RAG architectures or vector search in Elasticsearch for security knowledge retrieval, including TTP lookup and incident context enrichment.
• Experience with Elastic's ML jobs, including for User and Entity Behavior Analytics (UEBA), rare process detection, or anomalous login patterns.
• Experience with Elastic AI Assistant or integration of LLMs into Elastic Security workflows such as natural language querying and alert triage assistance.
• Experience building or fine‑tuning ML models outside Elastic, including Python, scikit‑learn, and PyTorch, for security use cases such as threat detection or lateral movement scoring.
• Knowledge of AI/ML concepts applied to security analytics such as anomaly detection, behavioral baselining, or threat scoring.
• TS/SCI clearance.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation and Benefits

Salary range: $112,800.00 to $257,000.00 (annualized USD). The compensation package includes health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Employees working at least 20 hours a week are eligible for Booz Allen’s benefit programs.

EEO Statement

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.