CrawlJobs Logo
Booz Allen Hamilton Logo Booz Allen Hamilton · IT - Software Development

System Security Engineer

United States, Annapolis Junction 99000.00 - 225000.00 USD / Year · Job Posted December 27, 2025
Apply Position
Job Link Share

Job Description

As a system security engineer, you play a pivotal role in securing our hardware and software to protect our user community and critical assets. From troubleshooting to remediating bugs and vulnerabilities, you use your expertise to ensure that things run smoothly. We’re looking for a system security engineer like you to apply your knowledge to our government clients’ challenges and their enterprise systems. Here, you’ll impact technology that helps support national security, protect civilians, and support the warfighter.

Job Responsibility

  • Guide your team of professionals as they maintain existing applications and keep systems working in sustainment mode
  • Use programming and scripting languages, including Python and Bash, to continuously enhance and maintain the application, troubleshoot any issues that arise operationally, and upgrade the system to meet security requirements
  • Advise our government clients on the best ways to improve and modernize the existing systems

Requirements

  • 4+ years of experience as a systems security engineer in programs that encompass systems security architecture development, requirements analysis, design, production, integration, test, and transition into operations
  • 4+ years of experience performing Information Systems Security Officer functions in support of USCYBERCOM or IC projects and offices
  • 4+ years of experience working with the Risk Management Framework (RMF) process
  • Experience assessing security vulnerabilities in software or systems and implementing mitigations
  • Experience working on teams using Agile technologies, including Atlassian Suite
  • Experience working with Amazon Web Services (AWS) cloud technology
  • Top Secret clearance
  • Bachelor’s degree in CS, Computer Engineering, or Information Systems
  • DoD 8570 compliant IAT Level II Certification

Nice to have

  • Experience working with eMass or Xacta
  • Knowledge of securing critical assets and systems for DoDIN
  • Ability to rapidly assess and acclimate to a fast-moving team dynamic
  • Master’s degree in CS, Computer Engineering, or Information Systems
  • AWS Cloud Certification

What we offer

  • Health, life, disability, financial, and retirement benefits
  • Paid leave
  • Professional development
  • Tuition assistance
  • Work-life programs
  • Dependent care
  • Recognition awards program
Booz Allen Hamilton - All Job Offers

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Suggested Tags: Frontend Developer Secretary Talent Manager Salesforce Administrator Data Analyst
Similar Jobs for

System Security Engineer

8 matching positions

Information System Security Engineer (ISSE) / Cybersecurity Systems Engineer (TS Cleared)

We are currently seeking a Information System Security Engineer (ISSE) / Cyberse...
Location
Location
United States , Quantico
Salary
Salary:
Not provided
nttdata.com Logo
NTT DATA
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's degree in related fields (e.g. Computer Management Information Systems, Computer Science) or six (6) years applicable experience to include four (4) years of specialized experience
  • Minimum 5 years supporting Information Security roles/responsibilities as listed above
  • One or more of the following certications: ISC2 CGRC, ISC2 SSCP, CompTIA CySA+, CompTIA Security+ CE, and/or ISC2 Certified in Cybersecurity
  • Active Top Secret security clearance
Job Responsibility
Job Responsibility
  • Manage, monitor, and maintain IT infrastructure to ensure system uptime and optimal performance
  • Maintain performance to ensure that the throughput of the system does not degrade unexpectedly as the volume of work increases
  • Perform regular system backups, recovery procedures, and data management tasks
  • Provide technical support and assistance to users
  • Develop and maintain system documentation, including configurations, procedures, and troubleshooting guides
  • Plan and implement software updates, hardware upgrades, and migrations with minimal disruption to operations
  • Provide technical support for systems and applications
  • Monitor and optimize the performance of the infrastructure
  • Develop and implement backup and recovery strategies
  • Ensure compliance with security and regulatory standards
  • Fulltime
Read More
Arrow Right

Senior Security Engineer and Principal Security Engineer

The Microsoft Windows Security team is looking for a learn-it-all security engin...
Location
Location
United States , Redmond
Salary
Salary:
119800.00 - 234700.00 USD / Year
https://www.microsoft.com/ Logo
Microsoft Corporation
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR equivalent experience
  • Ability to meet Microsoft, customer and/or government security screening requirements
  • Microsoft Cloud Background Check upon hire/transfer and every two years thereafter
  • 2+ years identifying vulnerabilities in operating systems and/or native (C/C++) applications
  • 5+ years of experience in a software engineering or security-related engineering
  • Demanstrated experience in security research, especially around vulnerability discovery
  • Experience exploiting bugs and bypassing security mitigations in operating systems
  • Familiarity with Microsoft Windows architecture
Job Responsibility
Job Responsibility
  • Participate in security reviews to identify and mitigate risk in Microsoft products, including design reviews, code reviews, and fuzzing
  • Be the security contact for teams building new innovative products and technologies in the next version of Windows and devices
  • Identify security vulnerabilities in a wide variety of key OS features such as network protocols, security features, and Microsoft devices
  • Leverage a broad and current understanding of security to devise new protections
  • Interact with the external security community and security researchers
  • Collaborate with product teams to improve security, and articulate the business value of security investments
  • Fulltime
Read More
Arrow Right

Satellite Communications System Security Engineer, Mid

Are you seeking an opportunity to enhance your expertise in satellite communicat...
Location
Location
United States , Fort Meade
Salary
Salary:
69400.00 - 158000.00 USD / Year
boozallen.com Logo
Booz Allen Hamilton
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 3+ years of experience implementing, testing, and validating STIGs, performing system self‑assessments, and creating STIG checklists
  • 3+ years of experience executing IAVM actions, such as IAVA alerts, bulletins, or tasking orders, and developing compliant engineering responses
  • 3+ years of experience deploying and validating ESS, ACAS, and CMRS, analyzing ACAS scans, developing remediation strategies, and implementing patches and upgrades
  • 3+ years of experience reviewing cybersecurity and engineering change requests to ensure operational availability and compliance
  • Knowledge of RMF and its application to networks and IT systems, such as Cisco routers, switches, Active Directory, or access control
  • Ability to manage users in Windows or Linux and administer VMs in VMware or Hyper‑V
  • Ability to accredit and secure DoD systems using RMF, perform IAVA analysis, document POA&Ms, and prepare security assessment artifacts
  • Secret clearance
  • HS diploma or GED
  • Security+ Certification
Job Responsibility
Job Responsibility
  • Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management
  • Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises
  • Perform risk and vulnerability assessments in network, system, and application areas and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise
  • Participate in the development of test strategies and conduct of testing, validating, and implementing applicable STIG requirements for current or new systems
  • Conduct periodic self-assessments of systems to ensure STIG compliance and create STIG checklists to support periodic self-assessments
  • Perform Information Assurance Vulnerability Management (IAVM) activities such as IA vulnerability alerts, bulletins, and tasking orders and develop a systematic approach for responses to IAVM related issues to maintain system compliance
What we offer
What we offer
  • Health, life, disability, financial, and retirement benefits
  • Paid leave
  • Professional development
  • Tuition assistance
  • Work-life programs
  • Dependent care
  • Recognition awards program
  • Fulltime
Read More
Arrow Right

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...
Location
Location
United States , Warrenton
Salary
Salary:
185000.00 USD / Year
amentum.com Logo
Amentum
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
  • Knowledge and experience with NESSUS/ACAS and Trellix administration
  • Experience in Splunk role while working in a Splunk Clustered Environment
  • Must be able to work a 40-hour work week, normally Monday through Friday
  • Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
  • Ability to travel (5-10%) primarily within 75 miles
  • Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
  • Exceptional attention to detail
  • excellent verbal and written communication skills
  • strong critical thinking, organizational, time-management, and problem-solving skills
Job Responsibility
Job Responsibility
  • Endpoint Security Engineering (Trellix/ePO): Expertly design, configure, and maintain Trellix components (ePO, Trellix Agent, DLP, HIPS, Policy Auditor, ABM, and VSE) across Windows and Linux environments
  • Author and deploy endpoint security policies for ENS modules (Threat Prevention, Firewall, Web Control) based on DISA STIGs and organizational needs
  • Develop custom signatures, rules, and exceptions to address zero-day threats and specific operational requirements
  • Validate custom exceptions to ensure uninterrupted operation of mission-critical processes without compromising compliance
  • Vulnerability Management (ACAS/Nessus): Design enterprise-wide vulnerability scanning strategies and manage the deployment of Security Centers and Nessus scanners
  • Serve as the final escalation point for complex scan issues, credentialing problems, and system communication failures
  • Configure automated reporting of compliance data to continuous monitoring systems and risk-scoring repositories
  • Security Integration & Engineering: Integrate Trellix and ACAS with tools such as Splunk, XSOAR, and ServiceNow to automate workflows and enhance incident response
  • Provide authoritative recommendations and ACAS-generated artifacts to support the Assessment and Authorization (A&A) process and RMF packages for Authority to Operate (ATO)
  • Lead the maintenance and scalability of test, development, and operational environments, collaborating with Network and DevSecOps teams to enhance resilience
What we offer
What we offer
  • Health, dental, and vision insurance
  • Paid time off and holidays
  • Retirement benefits (including 401(k) matching)
  • Educational reimbursement
  • Parental leave
  • Employee stock purchase plan
  • Tax-saving options
  • Disability and life insurance
  • Pet insurance
  • Fulltime
Read More
Arrow Right

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...
Location
Location
United States , San Antonio
Salary
Salary:
160000.00 - 175000.00 USD / Year
amentum.com Logo
Amentum
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
  • Experience in Splunk role while working in a Splunk Clustered Environment
  • Knowledge and experience with NESSUS/ACAS and Trellix administration
  • Must be able to work a 40-hour work week, normally Monday through Friday
  • Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
  • Ability to travel (5-10%) primarily within 75 miles
  • Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
  • Exceptional attention to detail
  • excellent verbal and written communication skills
  • strong critical thinking, organizational, time-management, and problem-solving skills
Job Responsibility
Job Responsibility
  • Experience creating custom dashboards, writing queries, building, and generating reports, and setting up alerts and notifications using all the Cyber tools (Splunk, Tenable, Trellix)
  • Demonstrated proficiency with recognizing and onboarding new data sources into the cyber tools and analyzing the data for anomalies and trends
  • Primarily responsible for maintaining the test and operational environments to include all cybersecurity tool sets and collaborating with systems and network engineers
  • Use knowledge, skills, and ability to conduct research for designing, integrating, and implementing security controls into current and future products/systems thus ensuring these systems can be accredited based on compliance with the Joint Special Access Program Implementation Guide (JSIG)
  • Recommend the components to implement system security requirements using intimate knowledge of security design best practices for information systems throughout the system development life cycle to support the generation of security engineering products
  • Assist with the design, deployment, and administration of a multi-site, distributed Splunk environment including Multi-site Clustering, Search Head Clustering, Universal Forwarders, Deployer, and Deployment Server
  • Configure, operate, and maintain Trellix and its components (ePolicy Orchestrator, Trellix Agent, Data Loss Prevention, Host Intrusion Prevention System, Policy Auditor, Asset Baseline Monitor, and Virus Scan Enterprise) on Windows and Linux creating exceptions to allow essential processes to continue uninterrupted
  • Administration/operation of information security compliance tools/platforms with a special concentration in managing Tenable Security Center and NESSUS
  • Provide Tier 1, 2, and 3 maintenance support for deployed cyber security technologies
  • Assist with periodic and regular security assessments
What we offer
What we offer
  • Health, dental, and vision insurance
  • Paid time off and holidays
  • Retirement benefits (including 401(k) matching)
  • Educational reimbursement
  • Parental leave
  • Employee stock purchase plan
  • Tax-saving options
  • Disability and life insurance
  • Pet insurance
  • Fulltime
Read More
Arrow Right

Satellite Communications System Security Engineer, Senior

As a Satellite Communications Systems Security Engineer, you will identify the n...
Location
Location
United States , Fort Meade
Salary
Salary:
77600.00 - 176000.00 USD / Year
boozallen.com Logo
Booz Allen Hamilton
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 7+ years of experience implementing, testing, and validating STIGs, performing system self‑assessments, and creating STIG checklists
  • 7+ years of experience executing IAVM actions, such as IAVA alerts, bulletins, or tasking orders, and developing compliant engineering responses
  • 7+ years of experience deploying and validating ESS, ACAS, and CMRS, analyzing ACAS scans, developing remediation strategies, and implementing patches and upgrades
  • 7+ years of experience reviewing cybersecurity and engineering change requests to ensure operational availability and compliance
  • Knowledge of RMF and its application to networks and IT systems, such as Cisco routers, switches, Active Directory, or access control
  • Ability to manage users in Windows or Linux and administer VMs in VMware or Hyper‑V
  • Ability to accredit and secure DoD systems using RMF, perform IAVA analysis, document POA&Ms, and prepare security assessment artifacts
  • Top Secret clearance
  • Bachelor’s degree in Science, Technology, or Engineering
  • Security+ Certification
Job Responsibility
Job Responsibility
  • Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management
  • Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises
  • Perform risk and vulnerability assessments in network, system, and application areas and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise
  • Participate in the development of test strategies and conduct of testing, validating, and implementing applicable STIG requirements for current or new systems
  • Conduct periodic self-assessments of systems to ensure STIG compliance and create STIG checklists to support periodic self-assessments
  • Perform Information Assurance Vulnerability Management (IAVM) activities such as IA vulnerability alerts, bulletins, and tasking orders and develop a systematic approach for responses to IAVM related issues to maintain system compliance
What we offer
What we offer
  • health, life, disability, financial, and retirement benefits
  • paid leave
  • professional development
  • tuition assistance
  • work-life programs
  • dependent care
  • recognition awards program
Read More
Arrow Right

Senior Information System Security Engineer

Astrion has an exciting opportunity for a Senior Information System Security Eng...
Location
Location
United States , Bedford / Hanscom AFB, Massachusetts
Salary
Salary:
160000.00 - 175000.00 USD / Year
astrion.us Logo
Astrion
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Must be a US Citizen
  • Must have an active Top Secret Clearance with SCI eligibility
  • MA/MS degree and at least 10 years of job experience
  • Minimum of ten years of progressive technical experience
  • Must meet DoDD 8140 IAT level II or higher
  • Certified Information Systems Security Professional (CISSP) required
  • SAP/SAR experience required
Job Responsibility
Job Responsibility
  • Lead the coordination of A&A documentation
  • Assist with design, development, implementation, integration of systems IA architecture
  • Serve as PMO expert of IA security protections and requirements
  • Assist in development of security plan of actions and milestone (POA&M) mitigations through timely assessment of POA&M corrective actions
  • Conduct technical and nontechnical reviews and observe audits as necessary to support development and test efforts
  • Demonstrate experience in: Security systems engineering involving hardware and software operating systems and application solutions
  • Security features and/or vulnerability of various operating systems
  • IA vulnerability testing
  • US Government contract proposals as IA/security engineering subject matter expert, and implementation of DoD and Federal IA A&A processes
  • IA controls and developing and maintaining associated A&A documentation IAW RMF
What we offer
What we offer
  • Competitive salaries
  • Continuing education assistance
  • Professional development
  • Multiple healthcare benefits package options
  • 401K with employer matching
  • Competitive time off policy along with a federally recognized holiday schedule
Read More
Arrow Right

Information System Security Engineer (ISSE), Journeyman

This position will perform cybersecurity analysis and support required for Risk ...
Location
Location
United States , St. Inigoes
Salary
Salary:
80000.00 - 90000.00 USD / Year
kairosinc.net Logo
KAIROS Inc
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in cybersecurity, computer science, IT, or another related field (required)
  • At least one (1) of the following certifications required: Security + CE, CGRC (formerly CAP), CASP+ CE, CISSP
  • Three (3) to seven (7) years of experience with RMF and A&A package development (required)
  • Experience with eMASS tool (required)
  • Strong facilitation skills when communicating results of findings
  • Well organized and a strong attention to detail
  • Strong customer relations, analytics, and documentation skills
  • Self-starter, highly motivated, strong work ethic with a commitment to quality
  • Microsoft office suite proficiency, i.e., Word, Excel, PowerPoint
  • Ability to work within a challenging, fast-paced, team-oriented environment
Job Responsibility
Job Responsibility
  • Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies
  • Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure
  • Manage all aspects of the RMF process from start to finish and support accreditation package development through customer acceptance
  • Fully understand and execute all RMF steps necessary for creating A&A packages in accordance with DoD, Defense Information Systems Agency (DISA), and Federal cybersecurity requirements
  • Perform ACAS scans and complete Security Technical Implementation Guides (STIGs) on the systems or networks under test, as required
  • Develop and maintain required RMF artifacts
  • Monitor and maintain system Enterprise Mission Assurance Support Service (eMASS) records
  • Conduct Cybersecurity testing analysis and provide overall vulnerability and risk assessment reports
  • Draft, track and monitor Plan of Action and Milestones (POA&Ms)
  • Work closely with the Information Systems Security Manager (ISSM), assigned Information System Security Engineer(s) and System Administrators to ensure system compliance with Federal and DoD regulations, and cybersecurity best practices
What we offer
What we offer
  • Medical Coverage with option for Heath Savings Account
  • Employer Paid Dental, Vision, Basic Life/AD&D, Short-Term/Long-term insurance
  • Paid Time Off
  • Eleven (11) Paid Holidays
  • Certification reimbursement program
  • Tuition Reimbursement Program
  • Paid Parental Leave
  • Employee Assistance Program (EAP)
  • Rewards and recognition programs
  • Community outreach events through our KAIROS Kares group
  • Fulltime
Read More
Arrow Right