Platform Security Engineer
Booz Allen Hamilton1 day ago
Base Salary
$78k - $176k/yr
Responsibilities
- Integrate and automate SAST, DAST, SCA, and container-scanning tools in secure CI/CD pipelines.
- Tune vulnerability detection thresholds, scanners, false positives, and remediation workflows.
- Harden Terraform infrastructure-as-code templates and enforce policy-as-code across environments.
- Conduct risk assessments and contribute to system security plans and continuous ATO efforts.
- Collaborate with development, operations, and security teams to support secure software delivery.
- Monitor pipeline activity for anomalies and assist with responding to security incidents.
- Drive adoption of zero-trust principles across the software development lifecycle.
- Evaluate security tools, review code samples, and support whitelisting or exemption processes.
- Implement automated compliance validation, continuous control monitoring, audit evidence collection, and GRC integrations where needed.
Requirements
- 5+ years of cybersecurity engineering experience, including DevSecOps in federal or defense environments using IaC/CaC, CI/CD, and SDLC concepts.
- 3+ years of software engineering experience using Python, TypeScript, or Bash and automation frameworks.
- 2+ years of experience implementing cybersecurity solutions in AWS and container orchestration environments such as Kubernetes.
- Experience with AI software development, Claude Code, Codex, or Pi.
- Knowledge of cybersecurity and threat-based cybersecurity frameworks, including AI/ML security practices.
- Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools.
- Ability to obtain a Secret clearance; an existing Secret clearance is preferred.
- High school diploma or GED required.
- Preferred qualifications include a bachelor’s degree in Cybersecurity, Computer Science, or a related field.
- Preferred certifications include Security+, AWS Solutions Architect, AWS Security, or CISSP.
- Preferred experience includes zero-trust security solutions, GRC engineering, policy-as-code, risk assessment automation, POA&M management, compliance reporting, and security-control mapping.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave, professional development, tuition assistance, work-life programs, and dependent care support.
- Recognition awards for exceptional performance and demonstration of company values.
- Full-time and part-time employees working at least 20 hours per week on a regular basis are eligible for benefit programs, with select offerings for others.
- Applicants selected will undergo a security investigation and may need to meet eligibility requirements for classified information access.
- Work may be remote, hybrid, or onsite depending on the position listing, with possible work at Booz Allen or customer facilities and camera use generally expected during virtual meetings.
Tech Stack
Categories
About Booz Allen Hamilton
Booz Allen Hamilton builds and integrates software, analytics, AI, cloud, and cybersecurity solutions while providing engineering and consulting services, primarily for U.S. defense, intelligence, and civil government clients, with select commercial partnerships. Its business is largely government contracting and professional services delivering mission systems and cyber defense. Founded in 1914 and headquartered in McLean, Virginia, Booz Allen is a public company traded on the NYSE (ticker: BAH).