Baseline Security Engineer, Lead

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Washington, DC
Salary
$99,000–$225,000 / yr
Employment
Full-time
Posted
3 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $185k
This role $162k
$84k $240k
below market most similar roles pay here above market

This role pays less than 61% of similar roles. Most pay $154,087–$216,000 — the blue band above. At the midpoint, this role pays about $162k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Baseline Security Engineer, Lead

The Baseline Security Engineer, Lead joins a cyber threat specialist team to support the SEC’s cyber mission. In this role, you will evaluate system risks, analyze NIST controls, and identify security gaps by viewing environments through the eyes of an adversary. You will monitor platforms for evolving threats, create security baselines from scratch using vendor documentation, and customize CIS and STIG benchmarks to meet organizational requirements. Key responsibilities include translating low-level requirements into high-level FISMA and NIST standards. Required skills include experience with the NIST 800 Special Publication series, the National Vulnerability Database, and Common Vulnerability Enumeration. Preferred technical expertise includes networking with Cisco or Palo Alto, operating systems like Red Hat, cloud services such as AWS or Azure, and automation tools including Ansible, Chef, or Puppet.

What you'll do

  • Create security baselines from scratch using vendor documentation.
  • Modify CIS and STIG benchmarks to meet specific organizational requirements.
  • Evaluate system risks and analyze NIST controls to determine system hardening methods.
  • Monitor security environments to identify gaps and evolving threats from an adversary's perspective.
  • Translate low-level security baseline requirements into high-level FISMA and NIST requirements.
  • Review, develop, and customize general security configuration baselines.
  • Identify security gaps across cloud computing, data engineering, and enterprise workflow platforms.

What we're looking for

  • High school diploma or GED.
  • 5+ years of experience providing support to Information Technology (IT) operations.
  • Experience creating security baselines using CIS and STIG benchmarks.
  • Experience working with NIST 800 Special Publication series guidance for risk management and security control implementation.
  • Experience reviewing, developing, or customizing general security configuration baselines.
  • Knowledge of the National Vulnerability Database (NVD) and Common Vulnerability Enumeration (CVE).
  • Ability to create security baselines from scratch using vendor documentation.
  • Bachelor's degree.

More like this

Similar roles

Information Systems Security Engineer, Lead

Booz Allen Hamilton

North Las Vegas, NV 22 days ago $112,800–$257,000
Information Assurance System Security Cybersecurity Operating Systems CISSP CISM CISA Program Management Security Assessments
7+ yrs exp

Lead Security Engineer

The Walt Disney Company

Bay Lake, FL 32 days ago $148,300–$198,800
AWS Azure Google Cloud Terraform CloudFormation Ansible Chef Python Ruby Java Go GitLab AWS CodeBuild Azure DevOps CI/CD CDN WAF NIST CIS Agile SRE DevOps
7+ yrs exp Hybrid

Lead Security Engineer

JPMorgan Chase

Columbus, OH +1 41 days ago
Blockchain Microservices CI/CD API-first Design Secure SDLC Threat Modeling Splunk Security Analytics Data Management Agile Vulnerability Remediation Root Cause Analysis
5+ yrs exp

Lead Security Engineer

JPMorgan Chase

Columbus, OH 15 days ago
Blockchain CI/CD Microservices API-first Design Splunk Secure SDLC Threat Modeling Security Analytics
5+ yrs exp

Senior Lead Security Engineer

JPMorgan Chase

Wilmington, DE 27 days ago
Security Engineering Threat Modeling Penetration Testing Cloud Native Artificial Intelligence Machine Learning Risk Assessment Agile
5+ yrs exp

Principal Security Lead Engineer

Amd

Santa Clara, CA 42 days ago $205,600–$308,400
Security Architecture Firmware SoC RTL Computer Architecture Pre-silicon Post-silicon System-level Modeling PSIRT CPU Security Graphics Architecture AI Tools Bring-up