below marketmost similar roles pay hereabove market
This role pays more than
51%
of similar roles. Most pay
$142,437–$194,100
— the blue band above.
At the midpoint, this role pays about
$162k
versus about
$168k
for comparable roles.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
1453 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 883 roles with salary data.
The Information Systems Security Engineer joins a team focused on designing, implementing, and assessing security controls for cloud-hosted information systems throughout their lifecycle. You will translate system requirements, architectures, and data flows into practical security designs and technical controls. Key responsibilities include developing A&A artifacts like system security plans and POA&Ms, performing architecture reviews, and managing vulnerability remediation. You will apply core principles including Zero Trust, least privilege, defense in depth, segmentation, and encryption. The role requires expertise in RMF, ICD 503, and NIST guidance to support authorization decisions and continuous monitoring. Necessary skills include securing cloud environments across identity, network, storage, and database layers. Candidates must possess an active TS/SCI clearance and a Bachelor’s degree to solve complex security challenges in regulated environments.
Engineer and assess security controls for cloud-hosted systems following RMF, ICD 503, and NIST guidance.
Translate system architectures and data flows into implementable technical controls and documented security designs.
Develop and maintain A&A artifacts including system security plans, POA&Ms, and continuous-monitoring plans.
Assess control effectiveness to identify security gaps, recommend remediations, and track corrective actions.
Apply Zero Trust, least privilege, defense in depth, and encryption practices to cloud environments.
Perform security engineering across requirements analysis, architecture reviews, vulnerability remediation, and deployment.
Support security assessments, authorization decisions, audit readiness, and continuous-monitoring activities.
Communicate security risks, compliance status, and technical recommendations to program stakeholders.
What we're looking for
8+ years of experience in information systems security engineering, cloud security, or cybersecurity.
Experience engineering, implementing, and assessing security controls for cloud-hosted systems per RMF, ICD 503, and NIST guidance.
Experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, and secrets management.
Experience translating security requirements, system architectures, and data flows into implementable technical controls and documented security designs.
Experience developing and maintaining A&A artifacts such as system security plans, POA&Ms, and continuous-monitoring plans.
Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
Active TS/SCI clearance and willingness to take a polygraph exam.
Wright Patterson AFB, OH68 days ago
$99,000–$225,000
NIST Risk Management Framework (RMF)
Splunk
Palo Alto
Cisco
Elastic
AWS
Azure
JSIG
eMASS
Vulnerability Assessment
Data Transport
Big Data Analytics
DoD 8570
DoD 8140
RMF
ATO
ACAS
STIGs
IDS/IPS
SIEM
DevSecOps
AWS
Linux
UNIX
Ubuntu
Red Hat
Agile
AI/ML
Firewalls
Cybersecurity Engineering
IT Service Management
CISSP-ISSEP
CCSP
CISM
System Security
Information Assurance
Cybersecurity
Security Assessment
Operating Systems
CISSP
CISM
CISA
Program Management
Security Tools
IT Security
Zero Trust
ICAM
SAML
OAuth 2.0
OpenID Connect
Active Directory
LDAP
SailPoint
Radiant Logic
Ping Federate
Delinea
Python
Ansible
Terraform
Puppet
Chef
PowerShell
Splunk
Elastic
Logstash
Kibana
Cribl
Confluent
Windows
Linux
TCP
IP
DNS
DHCP
HTTP
HTTPS
IDS
IPS
Firewalls
AI
ML
NIST 800-207