Platform Security Engineer
Booz Allen Hamilton14 days ago
Base Salary
$78k - $176k/yr
Responsibilities
- Integrate and automate SAST, DAST, SCA, and container scanning tools in secure CI/CD pipelines.
- Tune vulnerability detection thresholds and scanners, reduce false positives, and optimize remediation workflows.
- Harden Terraform infrastructure-as-code templates and enforce policy-as-code across environments.
- Conduct risk assessments and contribute to system security plans and continuous ATO efforts.
- Collaborate with development, operations, and security teams to support secure software delivery.
- Monitor pipeline activity for anomalies and assist with responding to security incidents.
- Drive adoption of zero trust principles across the software development lifecycle.
- Evaluate security tools and their suitability for development and operational environments.
- Automate compliance validation, continuous control monitoring, risk assessment, audit evidence collection, and compliance reporting where applicable.
Requirements
- 5+ years of cybersecurity engineering experience, including DevSecOps work in federal or defense environments using IaC/CaC, CI/CD, and SDLC concepts.
- 3+ years of software engineering experience using Python, TypeScript, or Bash and automation frameworks.
- 2+ years of experience implementing cybersecurity solutions in AWS and container orchestration environments such as Kubernetes.
- Experience with AI software development and tools such as Claude Code, Codex, or Pi.
- Knowledge of cybersecurity and threat-based cybersecurity frameworks, including AI/ML security best practices.
- Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools.
- Ability to obtain a Secret clearance; selected applicants may undergo a security investigation.
- HS diploma or GED required.
- Preferred experience includes code review, whitelisting or exemption processes, zero trust security solutions, security tool evaluation, and GRC engineering.
- Preferred knowledge includes policy-as-code, automated compliance validation, continuous control monitoring, NIST 800-53, RMF, CIS, POA&M management, audit evidence collection, compliance reporting, and GRC integration with CI/CD workflows.
- Preferred qualifications include a Secret clearance, a bachelor's degree in Cybersecurity, Computer Science, or a related field, and Security+, AWS Solutions Architect, AWS Security, or CISSP certifications.
- Excellent verbal, technical writing, and documentation skills are preferred.
Benefits
- Hybrid work in McLean, Virginia, with expected work at a Booz Allen or customer facility according to leadership and role needs.
- Health, life, disability, financial, and retirement benefits.
- Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
- Recognition awards program and other total well-being offerings.
- Full-time and part-time employees working at least 20 hours per week on a regular basis are eligible for applicable benefit programs.
Tech Stack
Categories
About Booz Allen Hamilton
Booz Allen Hamilton builds and integrates software, analytics, AI, cloud, and cybersecurity solutions while providing engineering and consulting services, primarily for U.S. defense, intelligence, and civil government clients, with select commercial partnerships. Its business is largely government contracting and professional services delivering mission systems and cyber defense. Founded in 1914 and headquartered in McLean, Virginia, Booz Allen is a public company traded on the NYSE (ticker: BAH).