Total 29 Senior Executive level Legal / Public / Security job vacancies in USA - Missouri - St. Louis - Lackland

As a result of business growth across the USA, Turner & Townsend are inviting experienced Senior level estimating professionals to consider relocating to the US, joining our teams supporting diverse construction projects and programs across the country.

Who are you?

You are an experienced Senior Infrastructure Estimator with a minimum of ten (10) years of progressive experience looking for the next step or are currently undertaking a similar role in a similar environment.

• Maintain liaison with client and other consultants at all projects stages.
• Provide leadership to cost management team, when necessary, ensure the delivery on all of accountabilities.
• Develop cost estimates from drawings and specifications.
• Meet and negotiate costs with Contractors.
• Use the appropriate estimating tool (client tools, customized estimating spreadsheets, industry estimating software, benchmarking, etc.).
• Produce monthly post contract cost reports and present to client.
• Provide input into value engineering; negotiate and approve final accounts.
• Identify improvements for cost management procedures, templates, and products, and refer ideas to appropriate line manager.
• Perform all aspects of estimating, analysis and verification of contractor costs.
• Manage cost checks and carry out valuations on larger projects, and ensure timely and accurate cost checking, and valuation process.
• Provide input into value engineering; negotiate and approve final costs.
• Develop life cycle, maintenance, and operating costs.
• Assist in the development of historical pricing database.
• Assist in the development of cost estimating guidelines for various programs.
• Be a Team Player – support the junior estimators and team, be flexible and maintain a positive attitude.

Address:

MUST HAVE: Experience with SAST/DAST tools and relevant experience performing Application Security Testing; working as security consultant with application teams.

About the role:

The Application Security Testing Engineer reports to the Senior Manager and assists with the security testing activities for BMO based applications. The role will be responsible for the execution and coordination of Static and Dynamic Application Security Testing (SAST/DAST), provides information security consulting services (SAST/DAST Scanning) for BMO overall and businesses/groups. Liaises with stakeholders to understand problems and opportunities and enables BMO to meet its goals by understanding business vision, objectives and KPIs. Participates in the execution of information security strategy.

What will you do:

• Subject Matter Expertise - Provides technical leadership to business areas as a Security Testing subject matter expert. Assists with efforts on the execution of security testing operations to include pre-engagement (scoping), engagement (testing) and post-engagement activities (reporting).
• Secure Testing - Assists in delivery of security testing projects according to a structured process, to include writing test reports. This may include oversight and/or execution of the configuration and deployment of security testing software and application of results to security analysis.
• Information Security Risk Management - Works with leadership to mature security testing team capabilities including reporting and remediation guidance in alignment with local and global regulatory requirements. Identifies security gaps and deficiencies by conducting risk assessments; able to recommend corrective action of identified vulnerabilities and weaknesses. Assists with the execution of planning, testing, tracking, and advises on necessary risk acceptance for identified security risks. 
• Secure Application Development - Assists with the execution of highly technical/analytical security assessments of custom web applications, mid-tier application services, backend mainframe applications and databases, including manual, custom and industry known attack methods using a risk-based intelligence-led methodology. Identifies potential misuse scenarios. Advises on secure development practices.

What you need to succeed:

• Typically between 5 - 7 years of relevant experience and a post-secondary degree in Computer Science or Information Systems or a related field of study or an equivalent combination of education and experience.
• Experience in testing web applications, APIs, mobile applications to identify vulnerabilities and weaknesses.
• Hands-on experience with dynamic application security (DAST) tools such as Burp Suite, OWASP ZAP, etc. Hands-on experience with static source code analysis (SAST) tools.
• Knowledge of coding languages (e.g. C#, JAVA, JavaScript, TypeScript, Python etc.) and can code with little oversight
• Knowledge of different rapid development processes, e.g. Waterfall, Agile, etc.
• Knowledge of coding vulnerabilities, frameworks, patching processes, Information Security risk and industry best practices, defense concepts, risk-based assessment approach
• Knowledge of OWASP Top 10, and the OWASP Testing Guide or other secure coding frameworks, NIST Cyber Security Framework (CSF)
• Understands the principles of secure coding techniques and secure code reviews, code scanning software and vulnerability code scanning processes, network protocols and connectivity.
• Industry certification is an asset - CISSP, CISSLP, CCSK, GIAC etc.
• Experience working in an Agile development environment, and ability to work effectively with cross-functional teams.

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

We’re here to help

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

Equifax is where you can power your possible. If you want to achieve your true potential, chart new paths, develop new skills, collaborate with bright minds,  and make a meaningful impact, we want to hear from you.

Sponsorship is not available for this position.

Equifax has a hybrid work schedule that allows for 2 days of remote work, with three days onsite.  The candidate will be required to work from Equifax’s Alpharetta (Atlanta) location - preferred, or Saint Louis.   

Data is our business, protecting it is paramount. Our Global Security team works to create and maintain the safest operating environment for Equifax's users and employees. As a Security Architect, you'll be a key player in the security roadmap and consulting efforts that address Equifax's needs for Cyber, SDLC, Infrastructure, Data and Identity capabilities. You will partner directly with the leaders in each security discipline to design solutions and then work with Engineering and Development teams to bring those designs to life.

Security architecture plays a pivotal role in ensuring the confidentiality and integrity of Equifax’s information systems and data.  Your focus will be on the long view and challenges, including the integration of security controls with cloud-based services, network segmentation, devaluation of sensitive data throughout its entire lifecycle, identity and access modernization and a host of others. You'll have the opportunity to be exposed to virtually all Equifax products and work with a wide variety of other teams throughout the company, such as information technology, legal, operations, data & analytics and every major business unit. Our team is responsible for providing the best security architecture possible to support our security initiatives and to partner with our software development teams in order to deliver our business platforms in a timely and secure manner.

What you will do 

• Ensure that the Equifax enterprise environment is secure from cyber threats.

• Define and document a 3-5 year security technology vision for Equifax security services.

• Develop secure architectures, roadmaps, and controls for complex environments.

• Participate in leading and defining security practices for consuming both on-premise and cloud services a using systematic approach to security.

• Lead initiatives to ensure that the technology vision is realized including developing detailed designs and plans and working with engineering to implement those plans for consumption by technology and business users.  Ensure security solutions meet compliance requirements and industry best practices.

• Work with software engineers to develop consumable security services. Use machine learning or advanced techniques to identify security risks.  Use DevOps principles to ensure the environment is robust and monitored.

• Advise technology and business teams in various security capabilities, presenting the principles and security posture of the corporation to all internal consumers.  Ensure security initiatives align with business goals.  Identify and evaluate emerging security technologies and trends.

• Work with various stakeholders to identify common patterns and services, documenting and designing those services.  Assist with determining the security requirements for new products and services.

• Execute "bake-offs" of various tools to implement patterns in collaboration with stakeholders to identify the best tool for the need.

• Conduct service risk assessments, and offer remediation recommendations.

• Define integration patterns that enable multiple tools to work together in the Equifax ecosystem to meet technology and security requirements.

• Define the processes that enable delivery of security services.  Facilitate engagement and improvement of the security posture of the corporation.

• Work with the application security team to help deliver a secure ecosystem that facilitates the delivery of software engineering capabilities to market in a secure fashion, protecting those information assets from compromise or exposure.

• Develop security policies, standards, and procedures that are compliant with relevant regulations and standards (PCI, FedRAMP etc).

What experience you need 

• BS degree in Mathematics, Statistics, Computer Science or Engineering or equivalent practical experience.

• 7-10 years of experience in Information Security.

• At least 3 years of experience in a security architecture role, demonstrating expertise in designing and implementing security solutions for large enterprises.

• Demonstrable track record dealing well with ambiguity, prioritizing needs and delivering measurable results in an agile, fast-paced environment.

• Excellent documentation and verbal skills.

• Experience designing and building secure software systems.

• Strong foundational understanding of secure software engineering principles, encryption technologies, audit controls, and distributed architectures.

• Experience with mentoring, advising or guiding teams to follow architectural or security best practices.

• Excellent communication and interpersonal skills.

• Thorough understanding of security technologies, protocols, and standards.

What could set you apart

• Experience with application security architecture with a demonstrated bias to early action and cutting edge technology.

• Professional level security certifications (CISSP, GIAC).

• Expertise with security control and program frameworks such as CSF or NIST 800-53.

• Experience with one or more of the major cloud service providers, including experience with deploying security related controls.  Google and AWS experience is preferred. 

• Well versed and knowledgeable in compliance and security standards and guidelines including SOX, NIST, CIS, ISO 27001/2, and PCI DSS.

• Extensive knowledge of security controls and technologies including SIEM, SOAR, ETP, EDR, DLP, WAF, IPS, and firewall.

• Experience with one or more programming languages; Java, JavaScript or Python are preferred.

#LI-Hybrid

#LI-KD1

We offer comprehensive compensation and healthcare packages, 401k matching, paid time off, and organizational growth potential through our online learning platform with guided career tracks.

Are you ready to power your possible?  Apply today, and get started on a path toward an exciting new career at Equifax, where you can make a difference!

Primary Location:

Function:

Schedule:

Key Role:

Work alongside supervisors and managers as well as alongside technical personnel such as Network Engineers and System Administrators. Participate in the development or modification of computer environment security program plans and requirements. Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered. Ensure that cybersecurity requirements are integrated into the Continuity of Operations Plan (COOP) for that system or DoD Component. Ensure that cybersecurity requirements are appropriately identified in computer environment operation procedures. Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network systems operations. Develop security requirements specific to an IT acquisition for inclusion in procurement documents. Develop security requirements for hardware, software, and services acquisitions specific to cybersecurity programs. Ensure that IA and IA-enabled software, hardware, and firmware comply with appropriate security configuration guidelines, policies, and procedures. Review cybersecurity plans and identify alternative functional cybersecurity strategies to address organizational security concerns. Ensure that cybersecurity inspections, tests, and reviews are coordinated. Evaluate the presence and adequacy of security measures proposed or provided in response to requirements contained in acquisition documents. Advise the Authorizing Official of any changes affecting any systems’ security posture.

Basic Qualifications:

• 6+ years of experience working in cybersecurity
• 2+ years of experience using Enterprise Mission Assurance Support Service (eMASS)
• Experience with authorization actions concerning software development and testing, and the interpretation of patterns of non-compliance to determine their impact on levels of risk or overall effectiveness of the enclave’s cybersecurity program
• Experience evaluating risk analysis in the decision-making process, and evaluating proposals to determine if proposed security solutions effectively address enclave requirements, as detailed in solicitation documents
• Experience reviewing cybersecurity policies
• Knowledge of the configuration management (CM) of DoD software, including source code, documentation, and fieldable products, and DoD security and program protection and declassification operations
• Knowledge of DoD 8500, AR 25-2, AR 70-1, and DA PAM 70-3 Army Acquisition Implementation
• Secret clearance
• Bachelor’s degree
• DoD 8570 or 8140, and CompTIA Security+ Certification

Additional Qualifications:

• TS/SCI clearance
• ISC2 Certified Information Systems Security Professional (CISSP) Certification
• Microsoft IT Professional (MCITP), Microsoft Certified Systems Engineer (MCSE), Microsoft Certified Professional (MCP) on Windows 2016 or 2019 Server, Windows 10 MCSE, or equivalent Operating Systems Certifications
• Linux Certifications
• Cisco Networking Certifications

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Address:

Description

We are seeking an enthusiastic and passionate professional for a Senior Cloud Security wants to design and implement security solutions for systems and services in AWS and Azure. We need someone who can establish the highest standards that meet and exceed security governance solutions and practices, provide assurance to management and auditors, and ensure sustained protection by embedding controls in the operational and DevOps (CI/CD) practices with a focus on automation. We are looking for someone who has a high level of technical security expertise and who takes seriously the responsibility of monitoring, detecting, protecting and maintaining the security of data, systems and networks

You are a leader with a strong technical background. You're have demonstrated strength at developing and implementing secure cloud architectures using a risk based cyber security & data privacy strategy, defining security patterns, roadmap and operating model that leverages collaboration, facilitating industry standard information security governance, advising senior leadership on cybersecurity & privacy risks and threats and investment strategies, and documenting appropriate policies and procedures to manage information security risks.

As a qualified candidate, you will be part of the team driving BMO’s Cloud implementation.  As a member of this team, you should possess the ability to inspire yourself and all of our team. Based on your previous experiences you will inject new knowledge and skills into an already high performing team thus excelling our efforts to new heights.

Your Responsibilities

• Assess, design, implement, automate, and document security solutions, controls and processes for Amazon Web Service (AWS) and MS Azure cloud platforms;

• Develop and maintain Security patterns for Cloud Platforms and Services; Assess all cloud patterns to ensure adherence to best security practices and controls

• Design and implement DevOps processes, tools, and re-usable templates to incorporate security into application and infrastructure design patterns and the building of security controls into the CI/CD process.

• Build and deliver policies as code, automating security controls and best practices.

• Review and approve codes and changes with security implications (e.g. IAM Roles and Policies, Security Groups …etc.)

• Provide subject matter expertise on architecture, authentication, and systems security based on a clear understanding of our cloud engineering stack, services and data flow

• Lead focused and continuous cyber security risk assessments of new and existing technologies to identify risks, and appropriate controls that balance security and operability

• Provide effective and pragmatic cyber security guidance up-front in major technology projects, to enable the business to innovate securely

• Assist in investigation and remediation of security incidents and issues

• Be the cloud security subject matter expert for our Cloud Engineering group and its partners in any IaaS/ PaaS and SaaS implementations.

• Conduct risk assessments to identify potential security vulnerabilities in cloud environments and formulate strategies to mitigate these risks

• Ensure that cloud security practices align with relevant industry standards and compliance requirements, such as CIS, NIST etc.

• Work closely with Information Security, product and software development teams to assess cybersecurity risk, cloud controls, and recommend solution and remediation in the cloud environment

Your Mindset

• You are a self-starter, driven and can handle multiple projects and priorities.

• You are passionate about driving the DevOps mindset and culture in a fast-paced, challenging environment where you get the opportunity to work with a spectrum of latest tools and technologies to drive forward Infrastructure-as-Code and Infrastructure-as-a-Service.

• You are actively looking to improve the solutions you implement, understand the efficacy of collaboration and reaching out across functional borders and are keen to work in a team of CI/CD and Infrastructure specialists.

• As a member of this team, you should possess the ability to inspire yourself and all of our team. Based on your previous experiences you will inject new knowledge and skills into an already high performing team thus excelling our efforts to new heights.

Required Core Skills:

• A university degree in Engineering, Computer Science, or Information Technology.

• 5-8 years of experience developing and fielding security architectures and/or engineering

• Security certification such as CISSP or CCSP or CCSK or any Cloud Certified Professional or Specialty certification (e.g., AWS Certified Security Specialty, Microsoft Certified Solutions Expert).

• Knowledge of technical security control environments and compliance frameworks including CSA CCM, ISO27001, ISO 27017 and NIST

• Demonstrated Knowledge of cloud architecture, cloud operations, cloud-based identity access and management, security, automation and orchestration.

• Clear understanding of security protocols and standards and experience with software and security architectures

• Extensive experience with Cloud native Security Solutions

• Firm grasp of networking protocols and operations. Comfortable with low level packet sniffing, working knowledge on Kali, Wireshark, Burpsuite, Metasploit, nmap, fiddler, sqlmap, nessus. Knowledge on network attacks, detections, and defenses

• knowledge of theoretical and applied cryptography, key management, and a strong understanding of cryptography algorithms such as RSA, AES, SSL vs TLS, PKI, etc

• Knowledge of Identity and Access Management concepts and technologies to secure production and corporate access, such as SSO, SAML Federated Identity, RBAC, authentication & authorization solutions

• Experience with scripting (Python, Perl, Bash, PowerShell) and API integrations

• Demonstrable internal and external relationship building skills and the ability to clearly articulate complex security concepts that influence decision making within a diverse corporate culture.

• Ability to lead an in-depth client meeting/workshop across a broad range of topics including discovery, cloud compliance, and security

• Strong programming skill with experience in API and Webhook development using Python, Node.js, Ruby, PowerShell and Shell Scripting languages.

Other Skills:

• Strong Interpersonal, communication and leadership Skills

• A critical thinker with strong research, analytics and problem solving skills

• Self-motivated with a positive attitude and an ability to work independently and or in a team

• Ability to communicate across business units and the ability to interface with and communicate complex technical concepts to a broad range of internal and external stakeholders

• Time management skills with the ability to manage multiple streams and lead less experienced architects

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

We’re here to help

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

Key Role:

Provide civil engineering expertise in support of an operational level war-fighting headquarters in the development of operational support force capabilities to enable agile operations employment for military clients. Provide coordination, monitoring, and consultation of engineering-specific theater requirements with other command theater units, adjunct services, and other agencies for the allocation, synchronization, and de-confliction of logistics resources. Support the development of Courses of Action, Concepts of Support, Plans of Action and Milestones, and integrated master schedules.

Basic Qualifications:

• 2+ years of experience in a Staff level, division, Joint Headquarters Air Force, Major Command, Marines, or Air Component Headquarters

• Experience with implementing the engineer components of budgeting, scheduling, coordination, tracking, and requirement specifications for construction efforts

• Ability to combine mission expertise with a technical mindset to help solve clients’ priority challenges, including coordinating experimentation of new technologies

• Secret clearance

• Bachelor’s degree

Additional Qualifications:

• Experience working cross-functionally using teamwork and collaboration across departments and commands

• Experience with agile combat operations and concepts, including Agile Combat Employment (ACE) initiative, site survey, infrastructure improvement, and prepositioning concepts across the AOR

• Ability to brief senior military leaders

• TS/SCI clearance

• Master's degree

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Blackbaud Cyber Security team is looking for a Senior Security Vulnerability Engineer to aide in identifying, assessing risk, and communicating vulnerability information across all Blackbaud environments.

What you’ll be doing:  

As the Senior Security Vulnerability Engineer, you will work to identify Infrastructure vulnerabilities and misconfigurations in on-premise and cloud environments.  Validation skills will be essential before thoroughly assessing the risk associated with the findings and then partnering with internal stakeholders to ensure communication and understanding of the risk assigned to them. 

The overall goals of the Vulnerability Management team include ensuring the identification, prioritization, and reporting of all risk associated with any Blackbaud network or asset. The team is responsible for ensuring the completeness and accuracy of the data as well as driving the organizations to meet enterprise goals in reducing the attack surface.

What we’ll want you to have:

A highly motivated and experienced security practitioner who passionately eliminates security vulnerabilities by ensuring stakeholders across the business have the right resources and information to address all discovered security concerns. You have a knack for fostering effective relationships and explaining technical security information across various levels of audiences. 

• 5+ years of Cyber Security experience

• Success with architecting, deploying, and operationalizing vulnerability scanning technology platforms and designing remediation workflows

• Advanced practical skills in vulnerability assessment tooling such as Crowdstrike, Tenable.io, Cisco Vulnerability Management, Qualys, Tenable CSPM, Tenable ASM etc.

• Comprehension of how to implement security controls and compensating/mitigating controls for vulnerability risk

• Experience with multi-cloud environments and cloud security compliance tools

• Understanding of securing and hardening operating systems, applications, and containers including frameworks that provide guidance on these subjects

• Experience with Kubernetes, APIs and Web services, including REST and SOAP

• Understanding of cyber security concepts, including threats, vulnerabilities, encryption, network security, and IAMS

• Demonstrated curiosity to research vulnerabilities, scanning logic, and possible solutions

• Ability to design and implement advanced vulnerability dashboards and executive reports

• Situational awareness around industry news on software vulnerabilities, including 0-day vulnerabilities and emergency patching

• Understanding of modern security engineering concepts and security-by-design principles

• Familiarity with API scripting such as python and bash

• Understanding of varied operation systems and network topology

#LI-REMOTE

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

We are looking for an accomplished, high-performing Cyber Threat Intel Analyst for our Cyber Threat Intel team with experience gathering cyber intel from multiple sources and aggregating that data to produce usable and actionable Cyber Threat Intelligence.  The Analyst is responsible for ensuring we are monitoring and analyzing threat past, present and future relevant to protecting Blackbaud.  This role requires a deep understanding of intel sources and the ability to aggregating and translate into actionable information.

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

As a Senior Cybersecurity Analyst specializing in risk management, you will play a crucial role in identifying, assessing, and mitigating cybersecurity risks across our organization. You will be responsible for executing risk management strategies, conducting risk assessments, quantifying risks, and collaborating with cross-functional teams to ensure the security of our systems, networks, and data.

What you'll be doing:

• Lead the cybersecurity risk management process, including identifying, analyzing, prioritizing, and quantifying cybersecurity risks based on business impact and likelihood of occurrence.

• Develop and maintain risk management frameworks, policies, and procedures in alignment with industry standards and regulatory requirements.

• Conduct regular risk assessments to identify potential threats and vulnerabilities, and collaborate with stakeholders to address findings.

• Provide guidance and recommendations on risk mitigation strategies, controls implementation, and security best practices.

• Collaborate with internal teams, including IT, compliance, legal, and business units, to integrate cybersecurity risk management into business processes and decision-making.

• Monitor and assess emerging cybersecurity threats and trends, and proactively recommend measures to enhance the organization's cybersecurity posture.

• Act as a subject matter expert on cybersecurity risk management, providing mentorship and training to other analysts and stakeholders as needed.

What we'd like you to have:

• 3+ years in cybersecurity risk management, with a focus on assessing and mitigating cybersecurity risks in complex IT environments.

• In-depth knowledge of cybersecurity frameworks, standards, and regulations (e.g., NIST Cybersecurity Framework, NIST 800-37, FAIR, etc.).

• Prior experience with Risk Management GRC tools (e.g., ServiceNow, Archer, etc).

• Strong analytical skills and ability to effectively prioritize and manage multiple tasks and projects in a fast-paced environment.

• Excellent communication and interpersonal skills, with the ability to convey technical concepts to non-technical stakeholders and collaborate effectively across teams.

• Strong understanding of emerging cybersecurity threats and trends, and ability to stay abreast of evolving industry best practices and regulatory requirements.

Join our team and contribute to building a resilient cybersecurity program that protects our organization's assets, reputation, and stakeholders.

#LI-REMOTE

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

Key Role:

Manage classified government contract programs and oversight of the day-to-day operations of a Special Access Program Facility (SAPF). Provide support in clearance processing, visit certifications, document control, and physical security for controlled areas associated with special access programs. Conduct highly sensitive security briefings. Coordinate all security education programs. Act as a primary liaison with upper management and outside agencies. Interact with internal and external clients or government security officials to perform security duties, address routine personnel security matters with employees regarding issues, report preparation, program security access briefings, and other duties, as required.

Basic Qualifications:

• 7+ years of experience as a Contractor Program Security Officer (CPSO) or security specialist administering security programs
• Experience with SCI or SAP programs, JPAS, and eQIP
• Knowledge of National Industrial Security Program Operating Manual (NISPOM), Intelligence Community Directive (ICD), and DoD and COMSEC security requirements
• Knowledge of the government classified contract process
• TS/SCI clearance
• HS diploma or GED

Additional Qualifications:

• Bachelor's degree
• Security Fundamentals Professional Certification (SFPC)
• Special Program Security Certification (SPSC)

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Opportunity:  

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—a Network Security Risk Specialist who will break down complex threats into manageable plans of action.  

As a Network Security Risk Specialist on our team, you’ll use your experience to work with DOD clients to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll review technical, environmental, and personnel details from Subject Matter Experts and Engineers to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. 

You’ll work with your client to translate security concepts, so they can make the best decisions to secure their mission-critical systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in cyber defense and information assurance.

Work with us as we protect our military’s communications systems. 

Join us. The world can’t wait. 

You Have: 

• 8+ years of experience with DoD network engineering and management

• 4+ years of experience in Cybersecurity

• Experience with eMASS, ACAS Security Center, and Nessus Scanner

• Experience with Risk Management Framework (RMF) requirements and NIST framework

• Knowledge of varied Firewall, IDS, and IPS technologies, Endpoint Security products, Security Incident and Event Management, and PKI

• Ability to produce documentation, briefing materials, and network diagrams in PowerPoint, Word, Excel, and Visio

• Ability to travel up to 50% of the time

• Secret clearance 

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or IT

• IAT Level III or IAM Level II DoD 8570 Certification

Nice If You Have: 

• Experience with Ansible, Elastic (ELK) stack, Cisco ASA, Palo Alto Firewall, IPS, Panorama, Kafka, virtual machines, and containers

• Ability to complete incident handling processes and analyze data from scans

• Top Secret clearance 

• Master's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or IT

• CISSP Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Create Your Career: 

Grow With Us 

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.  

A Place Where You Belong 

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.  

Your Candidate Journey 

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.   

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Opportunity: 

Everyone is trying to “harness the power of the cloud,” but not everyone knows how. As a Cloud Computing Infrastructure Architect, you know how to take advantage of cloud capabilities. On our team of experts, you’ll use cutting-edge enterprise cloud platforms to support your clients as they modernize their IT infrastructure and meet their most challenging missions. We’re looking for an engineer who can create advanced network security solutions in the cloud that will stand up to even the most advanced cyber threats.

As a senior cloud network security engineer at Booz Allen, you’ll research, design, and implement network security solutions to protect our client's most sensitive information in AWS, Azure, and GCP. You’ll coordinate with investment teams, executives, clients, and industry-leading vendors to identify the right mix of tools and techniques to translate your customer’s goals into a plan that will enable secure and effective cloud-hosted solutions. We need to come up with the best solution, so you’ll investigate new techniques, break free from the legacy model, and go where the industry is going. You’ll lead the team through a critical approach to design, including providing alternatives and customizing solutions to maintain a balance of security and mission needs. This is a chance to make a difference in the security of our country's financial markets, warfighters, citizen services, and healthcare. Your technical expertise will be vital as you help customers overcome their most difficult challenges by integrating cloud-native network security, next-generation firewalls (NGFW), Transport Layer Security (TLS), intrusion detection and prevention systems (IDS/IPS), packet capture (PCAP), web application firewalls (WAF), and network monitoring and analytics capabilities. You’ll be able to broaden your skillset into advanced and emerging areas of cybersecurity like zero trust networks, software-defined networking, and container security to support dynamic and immutable cloud infrastructure. Join our team as we deliver innovative cybersecurity solutions to protect our client's information in the cloud.

Join us. The world can’t wait.  

You Have:  

• 5+ years of experience with the government, public, or private industry
• Experience with firewall, network security, or network monitoring solutions, including leading firewall vendors, such as Palo Alto, Checkpoint, Fortinet, Cisco Firepower, or ASA
• Knowledge of network security concepts, including packet capture, intrusion detection, encryption in transit, break-and-inspect, and OWASP
• Knowledge of the OSI model, TCP/IP, TLS, FISMA, FedRAMP, PCI, RMF, DoD cybersecurity policies and control frameworks, modern encryption algorithms, IPSec, and TLS
• Knowledge of cloud-native and 3rd party network solutions to protect information hosted in Cloud providers, including AWS and Microsoft Azure, web application firewalls, and application delivery solutions, such as F5-BIG IP, Citrix ADC, and NGINX
• Ability to analyze requirements, design, implement, and operate highly available and scalable firewall and network security solutions in cloud environments
• Ability to educate and inform clients on network security concepts and how they can be applied to protect information, communicate and convey complex network solutions and concepts to a wide range of stakeholder audiences, and create technical artifacts, including logical and physical network diagrams, technical specifications, system installation procedures, and bills of materials
• Ability to obtain a security clearance
• HS diploma or GED

Nice If You Have:  

• Experience with AWS cloud-native network and solutions, including Security Groups and ACLs, VPC, Transit Gateway, VPC FlowLogs, PrivateLink, and Direct Connect
• Experience with software-defined network and WAN solutions
• Experience with network monitoring and security solutions for containerization technologies, including Docker, Kubernetes, and OpenShift
• Experience with writing proposals, whitepapers, and other technical marketing materials to compete for and win new business
• Experience with Git, Jenkins, and Ansible for implementing CI/CD pipeline solutions, infrastructure as code, and automation solutions
• Ability to develop code or scripts using Python, JavaScript, or programming languages
• Ability to lead a team of engineers in the development of complex integrated solutions
• Secret clearance
• Bachelor's degree in Mathematics, Science, or Engineering
• Security+, Cisco CCNA, Cisco CCNP, Palo Alto PCNSE, Palo Alto PCNSA, CISSP, AWS, GCP, or Microsoft Azure Certification

Clearance:  

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Create Your Career: 

Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Opportunity:  

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—an information security risk specialist who will break down complex threats into manageable plans of action.  

As an information security risk specialist on our team, you’ll use your experience to work with the DoD and Navy to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll review technical, environmental, and personnel details from SMEs, Engineers, and Program Managers to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts, so they can make the best decisions to secure their mission-critical systems and critical infrastructure. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity and the Risk Management Framework.   

Work with us as we protect our nation's cyber infrastructure.  

Join us. The world can’t wait. 

You Have:  

• 5+ years of experience in cybersecurity

• 3+ years of experience with Risk Management Framework supporting the Navy

• Experience as an Information Systems Security Officer

• Experience with developing supporting artifacts for Navy authorization packages, including Categorization Forms, HW/SW Lists, Authorization Boundary Diagrams, and Security Control policy documentation

• Experience with Navy Risk Management Framework and analyzing policies, procedures, and standard operating procedures 

• Experience with Enterprise Mission Assurance Support Service (eMASS)

• Experience in creating and managing POA&Ms

• TS/SCI clearance

• Bachelor’s degree

• DoD 8570 IAT or IAM Level II Certification

Nice If You Have: 

• Experience as an Operating System Administrator, Systems Engineer, Requirements Analyst, Information Systems Security Manager, or Information Systems Security Engineer

• Experience with using Microsoft Office products, including Word, Excel, PowerPoint, and Visio

• Experience with Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), Ports, Protocols and Services Matrix, Vulnerability Remediation Asset Manager (VRAM), and Host Based Security System

• Experience with eMASSTer 

• Ability to identify security requirements for connected and non-connected systems and unclassified and classified systems 

• Ability to create tactics, techniques, procedures, white papers, standard operating procedures, workflows, system data flows, and architectural diagrams

• Master’s degree

• Navy Qualified Validator Level I, II, or III Certification

Clearance: 

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career: 

Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

What we’re looking for:

Education and Experience:

• JD from an accredited law school, with strong academic credentials

• Current bar admission required

• Minimum of ten (10) years relevant experience at a law firm, in-house legal department, or a combination of both, with at least three (3) years of in-house experience preferred

• Experience in the chemical, distribution and/or life sciences industries preferred

• Undergraduate or graduate degree in sciences preferred

Who you are:

• High integrity, with a commitment to upholding Avantor’s values of innovation, customer centricity, accountability, respect, and excellence

• Excellent verbal and written business communication skills and ability to impact and influence at all levels of an organization

• Exceptional analytical, drafting, legal research, writing, and organizational skills, plus focused attention to detail

• Strong and effective judgment, and ability to present ideas logically

• Client-focused and confident, with strong interpersonal and negotiation skills to interact with senior business leaders, as well as vendors, customers and other third parties

• Ability to resolve conflict, overcome resistance and facilitate consensus

• Flexibility to adapt to new Company priorities, processes, initiatives, and risk tolerance, and the ability to offer practical, compliance-oriented solutions

• Collaborative approach necessary for working in a global organization

• Ability to work independently and handle complex and sophisticated legal matters with minimal supervision

• Ability to handle multiple priorities within tight deadlines and prioritize workload in a manner that best serves the needs of the business

• Willing to learn new areas of business and the law

How you will thrive and create an impact: 

• Develops strategy and manages, from start to finish, lawsuits and subpoena responses on behalf of the Company, including early case assessments, exposure analyses, and matter disposition goals. 

• Evaluates and manages pre-litigation disputes arising from the use of Avantor’s products or services.

• Leads or participates in internal and government investigations across the enterprise.

• Proactively identifies and implements risk mitigation strategies to minimize potential litigation.

• Selects, directs, and works collaboratively with fit-for-purpose outside counsel to deliver most favorable results for the enterprise. 

• Manages all aspects of in-house litigation support from start to finish, including record retention/legal holds, discovery, witness interviews, mediations/arbitrations, trials, and appeals.

• Develops and effectively manages budgets.

• Collaborates with Finance, Internal Audit, Enterprise Risk Management and other functions to provide capable

• Knowledge in data privacy and security laws is helpful.

• Handles other responsibilities delegated by VP, Legal.

#LI-Remote

Disclaimer:

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of employees assigned to this position. Avantor is proud to be an equal opportunity employer.

Dare to go further in your career. Join our global team of 14,000+ associates whose passion for discovery and determination to overcome challenges relentlessly advances life-changing science.
 
The work we do changes people's lives for the better. It brings new patient treatments and therapies to market, giving a cancer survivor the chance to walk his daughter down the aisle. It enables medical devices that help a little boy hear his mom's voice for the first time. Outcomes such as these create unlimited opportunities for you to contribute your talents, learn new skills and grow your career at Avantor.
 
We are committed to helping you on this journey through our diverse, equitable and inclusive culture which includes learning experiences to support your career growth and success. At Avantor, dare to go further and see how the impact of your contributions set science in motion to create a better world. Apply today!

EEO Statement:

We are an Equal Employment/Affirmative Action employer and VEVRAA Federal Contractor. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state/province, or local law.

If you need a reasonable accommodation for any part of the employment process, please contact us by email at recruiting@avantorsciences.com and let us know the nature of your request and your contact information. Requests for accommodation will be considered on a case-by-case basis. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this email address.

For more information about equal employment opportunity protections, please view the Equal Employment Opportunity is THE LAW Poster, EEO is the Law Poster Supplement, and Pay Transparency Non-Discrimination Provision.

3rd Party Non-Solicitation Policy:

By submitting candidates without having been formally assigned on and contracted for a specific job requisition by Avantor, or by failing to comply with the Avantor recruitment process, you forfeit any fee on the submitted candidates, regardless of your usual terms and conditions. Avantor works with a preferred supplier list and will take the initiative to engage with recruitment agencies based on its needs and will not be accepting any form of solicitation.