Senior Baseline Security Lead - Threat & Compliance

VulnU; Washington (District of Columbia); On-site; USD 99,000 - 225,000; Full time

Benefits offered by this job

Learning budget

Job summary

Booz Allen Hamilton is seeking a Baseline Security Engineer, Lead to protect critical systems and data for our SEC client. You will develop and maintain security baselines, evaluate risks across cloud, data engineering, and enterprise workflows, and translate requirements into actionable controls.

You will work with stakeholders to reinforce the security posture, monitor environments, and drive adversary-informed improvements, with opportunities for mentoring and certifications.

Qualifications

• 5 years of experience providing support to IT operations.
• Experience with CIS and STIG benchmarks and NIST 800-series guidance.
• Ability to translate low-level baseline requirements into high-level FISMA/NIST controls.
• Experience developing or modifying security baselines from vendor documentation.

Responsibilities

• Monitor security environments and identify gaps from the perspective of an adversary.
• Develop and customize security baselines using vendor documentation and industry benchmarks (CIS/STIG).
• Translate security requirements into high-level controls and client-specific implementations (FISMA/NIST).
• Collaborate with cloud, data engineering, and enterprise platforms to secure systems.

Skills

IT operations

CIS benchmarks

STIG benchmarks

NIST controls

Public Trust Vetting

Security baselines

Education

Bachelor's degree

Tools

AWS

Ansible

Terraform

CloudFormation

OpenShift

ELK

Job description

Booz Allen Hamilton is seeking a Baseline Security Engineer, Lead to protect critical systems and data for our SEC client. You will develop and maintain security baselines, evaluate risks across cloud, data engineering, and enterprise workflows, and translate requirements into actionable controls.

You will work with stakeholders to reinforce the security posture, monitor environments, and drive adversary-informed improvements, with opportunities for mentoring and certifications.