Security Engineer

• Support a Federal Agency’s nationwide Physical Security Program Office by managing a testing and demonstration laboratory
• Maintain a safe and orderly laboratory and ensure equipment and prior test results are readily accessible
• Install, configure, integrate, and update electronic security hardware and software, including PACS, IDS, VMS, intercom, and network systems
• Evaluate new, emerging, and returned products for capability, limitations, interoperability, maturity, Federal policy compliance, and fitness for Program use or reuse
• Advise stakeholders on changes to installation and configuration standards
• Develop practical test methods and conduct controlled experiments producing meaningful, repeatable results
• Analyze test results and produce evaluation reports, technical guides, and procedures
• Reproduce field-reported problems and troubleshoot hardware, software, networking, cabling, power, configuration, and integration issues
• Facilitate laboratory activities with manufacturers’ representatives to obtain technical information and resolve problems
• Test PACS hardware and software components for compliance with Federal security policies, standards, and functional requirements
• Maintain equipment inventories, labels, diagrams, photographs, configuration records, and test documentation
• Prepare equipment and test environments for stakeholder demonstrations and reviews
• Travel up to 10% outside the DC area to validate Physical Security installations performed by third parties and issue findings reports

Electronic Security Engineer

• Support DSOP platform-wide cybersecurity requirements
• Ensure secure configuration, continuous monitoring, vulnerability management, and compliance across DSOP environments
• Conduct container and Kubernetes security assessments
• Develop hardened configurations and STIG-aligned baselines
• Build and maintain security controls for container registries, images, and pipelines
• Perform vulnerability scanning, remediation tracking, and reporting
• Support RMF accreditation, continuous monitoring, and security engineering tasks
• Collaborate with DevSecOps and infrastructure teams to integrate security into CI/CD
• Implement zero-trust security patterns and secure deployment workflows
• Manage secrets, certificate rotation, and identity enforcement

Information Security Engineer

• Implement and monitor security controls for systems and applications
• Perform vulnerability scans and track remediation of findings
• Support Assessment and Authorization (A&A) activities under the NIST Risk Management Framework (RMF)
• Develop and update security documentation such as System Security Plans and POA&Ms
• Review audit logs and respond to security incidents
• Advise development and operations teams on secure configurations and practices
• Support security awareness and compliance reporting
• Perform other duties as assigned

Security Specialist

• Lead reviews of network security architectures, designs, firewall requests, trust-zone transfers, and security controls for least privilege and policy compliance.
• Lead development and maintenance of LAN, WAN, cloud-network, SD-WAN, and ACI security standards, diagrams, designs, and transition documentation.
• Administer, configure, tune, secure, and sustain network security tools, devices, sensors, IDS/IPS, SIEM feeds, firewalls, proxies, and CDM capabilities.
• Support security investigations, incident containment and recovery, troubleshooting, and root-cause analysis for network-related issues.
• Identify network security and performance gaps, recommend corrective action, and conduct alternatives analyses, trade studies, and technology evaluations.
• Develop network security policies, awareness materials, training, signature-management records, maintenance reports, and performance reports.

Networking Security Engineer

• Lead secure cloud and hybrid architectures, baselines, continuous monitoring, security-tool administration, configuration management, audits, and operational improvement
• Conduct cybersecurity modernization, Zero Trust, security architecture, and security engineering activities
• Perform architecture, tool, configuration, process, readiness, and gap assessments across on-premises and cloud environments
• Develop implementation roadmaps, strategies, metrics, dashboards, schedules, risk registers, and technical recommendations
• Perform incident analysis, cost and performance optimization, documentation, and training
• Coordinate with stakeholders and communicate with Government personnel
• Support SecDevOps or network-focused assignments as specified by the PWS

Cloud Security Engineer

• Apply Zero Trust principles and authoritative guidance, including OMB M-22-09, CISA's Zero Trust Maturity Model, NIST SP 800-207, and Executive Order 14028.
• Evaluate CBP architectures, tools, configurations, and procedures to document the current security posture and identify modernization gaps.
• Develop and maintain Zero Trust implementation and optimization roadmaps across identity, devices, networks, applications, workloads, data, visibility, automation, and governance.
• Assess technologies and recommend tools, configurations, and implementation priorities that improve Zero Trust maturity.
• Track modernization risks, issues, blockers, metrics, schedules, dashboards, and mitigation actions for Government leadership.
• Develop technical and nontechnical documentation, briefings, architecture views, operational views, network diagrams, and online knowledge content.
• Coordinate working groups and stakeholders to clarify responsibilities, resolve architecture issues, and align modernization efforts across CBP OIT.

Security Modernization Specialist

• Manage a medium-sized security team delivering a Mission First approach while implementing National Industrial Security Programs (NISP)
• Manage, administer, and coordinate industrial security programs and security activities to ensure compliance with government and company policies and procedures
• Manage a small team of Facility Security Officers across the enterprise
• Assure the security of people, facilities, programs, and operations across geographically dispersed National Security efforts
• Provide support at two local sites and leadership to Program and Industrial Security Operations
• Work alongside the Senior Manager and Director on security for programs, contracts, and operations involving unclassified, CUI, and Collateral programs
• Provide guidance and professional development for security professionals
• Integrate industrial security initiatives across the enterprise and ensure employee engagement and facilities changes support contract compliance and operational goals
• Participate in investigations of security incidents and assist with disciplinary and legal matters
• Maintain security documentation, files, Facility Security Clearance documentation, DD-254s, classified holdings, and classified transmittals in accordance with DCSA and NISPOM requirements
• Provide and document new employee security briefings, exit interviews, and debriefings
• Investigate and report security violations and incidents
• Participate in and oversee annual refresher training and prepare documentation for DCSA Security Vulnerability Assessments
• Maintain working relationships with DCSA, other Federal Agencies, and contract security offices
• Perform daily security activities and enforce government and company security policies

Manager, Industrial Security

• Assess and request customer authorization for company-managed classified endpoints, servers, networks, and security appliances
• Apply evolving U.S. Government cybersecurity policy and guidance
• Execute system, network, and security appliance auditing, virus scanning, and hardware and software configuration management
• Monitor program system administrators to ensure relevant security procedures are followed
• Document compliance criteria and test cases to validate evolving cybersecurity requirements
• Apply cybersecurity requirements and guidance from NIST, the Intelligence Community, and the DoD

Information System Security Officer

• Perform functions to protect company and government sensitive and classified information
• Serve as Site Security Manager for secure space projects
• Provide program and technical support across Booz Allen secure space initiatives
• Support secure space design, construction, commissioning, and accreditation for DoD Collateral Open Storage Areas, restricted areas, and IC SCIF or SAPF facilities
• Collaborate in planning, design, construction, and accreditation efforts of secure spaces
• Partner with corporate leadership, market teams, program managers, and enterprise technology staff to define secure space requirements and deliver solutions
• Provide security solutions and recommendations for construction challenges
• Assist with documentation requirements for secure space builds, including pre-construction documentation, CSPs, FFCs, and other accreditation documentation
• Liaise with DoD and IC counterparts regarding changing requirements and facilitate construction or accreditation efforts
• Coordinate with corporate security, GSOC, Global Workplace, construction PMs, external A/E, and trade partners
• Conduct design reviews, on-site assessments, commissioning, acceptance testing, and construction security oversight

Site Security Manager

• Support the ISSO/Security Architect as a secondary point of contact with programs, system owners, administrators, and other stakeholders
• Track correspondence, action items, deliverables, deadlines, and meeting follow-ups through closure
• Schedule meetings, capture notes, distribute action items, and maintain project planning boards and deliverable trackers
• Review, track, and maintain security and interconnection documentation, including ISAs, SLAs, OLAs, MOUs, MOAs, PTAs, and PIAs
• Manage routing, signatures, expirations, and renewals for security agreements
• Draft, format, review, and maintain supporting security documentation with completeness, consistency, version control, and organized document management
• Track vulnerability scan results, remediation status, and POA&M items
• Coordinate scan schedules and follow up on open findings with system administrators
• Maintain hardware and software inventories and align them with system documentation and the authorization boundary
• Enter and update artifacts, control status, inventories, evidence, and POA&Ms in GRC tools such as Xacta
• Generate status reports for assessments and continuous monitoring
• Support ongoing RMF, ATO, and continuous monitoring activities
• Escalate unresolved issues, documentation gaps, or schedule risks as needed

Security Engineer jobs in Virginia