Cybersecurity Engineer and Risk Analyst

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: San Diego, CA
Salary: $99,000–$225,000 / yr
Posted: 23 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $161k

This role $162k

$84k most similar roles pay here $240k

This role pays more than 56% of similar roles. Most pay $137,700–$185,000 — the shaded band above. At the midpoint, this role pays about $162k versus about $161k for comparable roles.

Based on 239 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 802 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 783 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Cybersecurity Engineer and Risk Analyst

Role Posting Log in to save

As a Cybersecurity Engineer and Risk Analyst, you will join the team to protect military infrastructure by identifying vulnerabilities and implementing security strategies. You will perform risk and vulnerability assessments across networks, systems, and applications while developing infrastructure controls to enhance detection capabilities and event correlation. Your daily work involves troubleshooting complex challenges using knowledge of cybersecurity policy, network infrastructure, and risk management. You will utilize tools such as ACAS, STIGing, eMASS, and Evaluate-STIG to assess threats and manage RMF artifacts like Security Assessment Plans. The role requires proficiency in Windows, Linux, cloud environments, and virtualization, alongside experience with big data analytics to identify indicators of compromise. You will communicate technical complexities to diverse audiences while ensuring the security posture of Navy missions through proactive risk mitigation and systems development lifecycle management.

Skills

RMF ACAS STIG eMASS DevSecOps Vulnerability Assessment Network Security Linux Windows Virtualization Intrusion Prevention Systems Firewalls Big Data Analytics Cybersecurity Policy Systems Development Lifecycle

What you'll do

Perform risk and vulnerability assessments across network, system, and application areas.
Implement infrastructure controls including enhanced detection capabilities and improved event correlation.
Manage Risk Management Framework (RMF) activities including Assessment and Authorization (A&A) and artifact maintenance.
Utilize ACAS, STIGing, and scanning tools to assess security threats and implement protections.
Analyze big data and traditional security events to identify advanced threats or indicators of compromise.
Develop and maintain system artifacts such as Boundary Diagrams and Data Flow Diagrams.
Process security packages through eMASS workflows and develop written risk mitigations.
Communicate complex cybersecurity risks and technical findings to both technical and non-technical audiences.

What we're looking for

Secret clearance required.
HS diploma or GED.
DoD 8140 Certification.
4+ years of experience working with IT systems for a DoD or government agency.
4+ years of experience leading Navy Risk Management Framework (RMF) activities and maintaining RMF artifacts.
4+ years of experience implementing security controls, performing compliance testing, and conducting vulnerability analysis.
Experience with operating systems (Windows, Linux), cloud/virtualization, architecture visualization, and eMASS.
Experience with ACAS, STIGs, DevSecOps, automation, or network engineering functions (preferred); Bachelor's degree in a related field (preferred).