below marketmost similar roles pay hereabove market
This role pays less than
77%
of similar roles. Most pay
$142,450–$197,850
— the blue band above.
At the midpoint, this role pays about
$142k
versus about
$170k
for comparable roles.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
1660 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 908 roles with salary data.
The Cloud Security Engineer will join the team to define, communicate, and implement security architecture for Sit(x), a product supporting mission-critical tactical communications networks. This role involves guiding the development of cloud-based security architectures, recommending tools based on research of on-premise and hybrid resources, and ensuring standards are met for information assurance. Key responsibilities include addressing the Risk Management Framework, performing security architecture evaluations, and troubleshooting infrastructure. The candidate will utilize AWS infrastructure, IAM, VPC networking, and security controls while implementing STIGs and Linux security hardening. Technical skills required include experience with Splunk, AWS-native OpenSearch-based security analytics, GuardDuty, and CloudTrail. The role focuses on securing public safety systems by managing vulnerability remediation, continuous monitoring, and improving the overall security posture of cloud-based applications.
Define, communicate, and implement security architecture to support mission-critical cloud operations.
Recommend security tools and capabilities based on research of on-premise, cloud-based, and hybrid resources.
Ensure developers meet information assurance and security requirements for cloud-based applications.
Apply the Risk Management Framework (RMF) to assess and mitigate environmental risks.
Implement STIGs and build custom STIG-hardened AMIs for Linux security hardening.
Manage security analytics, centralized logging, and threat detection using Splunk or AWS-native tools.
Perform vulnerability management, remediation, and continuous monitoring to improve security posture.
Mentor junior cloud security experts on best practices and technologies.
What we're looking for
5+ years of experience building and administering cloud environments using cloud-native functionality, COTs, GOTs, and open-source tools.
Experience with security architecture evaluations, guidance development, and troubleshooting.
Experience with the Risk Management Framework (RMF).
Experience with AWS infrastructure, IAM, VPC networking, security controls, and troubleshooting.
Experience implementing STIGs, Linux security hardening, and building and maintaining custom STIG-hardened AMIs.
Experience with Splunk or AWS-native OpenSearch-based security analytics, centralized logging, threat detection, and AWS security services.
Experience with POA&Ms, vulnerability management, security documentation, continuous monitoring, and improving security posture.
Bachelor's degree in Computer Science.
Experience with the software development life cycle (SDLC) (preferred).
Knowledge of multicloud governance and automation in AWS, Google Cloud, Azure, Oracle Cloud, or other providers (preferred).
DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP (preferred).
DoD 8570 Cybersecurity Service Provider-Infrastructure Support Certification (CSSP-IS) such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND (preferred).