Key Role:
Display a strong background in security operations, threat detection, and security engineering. Be responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities, which enable the client to achieve measurable growth and maturity. Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate your customers’ needs and future goals into a plan that will enable secure and effective solutions. Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs. Create technical solutions to identify security threats, enhance detection capabilities, and drive improvement in response efforts.
Basic Qualifications:
5+ years of experience with cybersecurity engineering in network security, infrastructure security, applications or systems security, security operations, SIEM, incident response, or threat intelligence
Experience with major automation applications, including integrating tools, designing, troubleshooting, training, or supporting technical requirements
Experience with Python
Experience working with transformation teams on initiatives involving automation and developing innovative solutions to complex problems
Ability to produce new playbooks and automate manual security operation procedures per backlog and security operations team requirements, adapting to emerging security tools and controls
Ability to manage and maintain an inventory of integrations that enable broader playbook creation, working closely with platform engineers to implement necessary integrations and provide ports or protocols flows and IA artifacts to support accreditation changes
Ability to develop connectors with tools to effectively enable end-to-end automation of security operations procedures
Top Secret clearance
HS diploma or GED
Additional Qualifications:
Experience with threat intelligence tools such as ThreatQ, Analyst1, or ThreatConnect
Experience with log management platforms, including Splunk or ELK Stack
Experience with cybersecurity tools, including Splunk, Cisco ISE, Forescout, BigFix, Tanium, Zscaler, Palo Alto, McAfee, Carbon Black, CrowdStrike, FireEye, Cloud Security platforms, or ServiceNow
Experience with Linux administration
Experience with networks and network protocols, including TCP, UDP, DNS, HTTP, HTTPS, SSH, and FTP
TS/SCI clearance
Automation Tools certification, including Splunk or Splunk SOAR, Security+, CEH, or CISSP Certification
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $77,500.00 to $176,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
Support U.S. Cyber Command efforts as a Lesson Learned Analyst to validate, publish, and implement lessons learned across cyber operations and training.
Senior AWS Cloud Engineer needed to architect, automate, and secure scalable AWS solutions for mission-focused clients in a TS/SCI environment.
Experienced Linux-focused monitoring and automation engineer needed to support enterprise monitoring (EM7) environments and automate operational workflows across network, collaboration, data center, and security portfolios.
Datavant is hiring a NetSuite Senior Administrator to optimize and govern its multi-entity NetSuite ERP, supporting Finance, Audit, and cross-functional integrations in a fast-growing healthcare-data SaaS environment.
Provide hands-on desktop, network, and executive-level IT support for Live Nation’s Beverly Hills office, ensuring timely resolution of tickets and reliable end-user computing environments.
Lead SentinelOne’s AI Center of Excellence and IT track for Product-Led Growth while owning enterprise automation to accelerate AI adoption and product-driven experiences.
Lead Wix's US IT operations from New York, overseeing infrastructure, help desk, networking, security, and AI-driven automation while managing a cross-site IT team.
Satair, part of Airbus, is looking for an IT Support Specialist in Dulles to deliver hands-on technical support, incident coordination, and asset/IAM management for local and global users.
Experienced Azure infrastructure and cybersecurity engineer needed to lead hardening, RMF/STIG implementation, and vulnerability remediation for U.S. Navy systems.
Lead and grow a regional Security Operations Center for Woven by Toyota, driving detection, incident response, and automation across cloud and vehicle-related environments.
Geeks on Site is recruiting on-call 1099 field IT technicians in the Indianapolis–Carmel–Anderson area to provide onsite PC, Mac, printer, scanner, network, and TV configuration support.
CyberArk is hiring an IT Infrastructure Team Lead to oversee hybrid-cloud and enterprise IT systems, lead a team of specialists, and drive modernization and automation for internal IT and development environments.
Experienced Google Workspace Deployment Engineer needed to architect and execute full-cycle Workspace migrations and deployments for a client-focused consulting team.
Remote POS Systems Analyst for Live Nation responsible for ensuring POS and venue IT data integrity, standardizing SKU/reporting structures, and supporting application integrations across multi-location venues.
Washington University seeks a Technical Support Specialist III to lead the student-staffed walk-up service, mentor student employees, and resolve advanced desktop and AV support needs across campus.