Basic Qualifications:
-8+ years of experience with IT
-Experience with the secure development of or with conducting security analysis on service-oriented architectures using XML, XML-Digital Signature, XML-Encryption, SOAP, XACML, SAML, WS-Security, WS-I Basic Security Profile, WSDL, UDDI, and WS-Trust
-Experience with participation in enterprise security planning, design, implementation, operations, and assessment
-Experience with requirements analysis, project planning, resource management, risk management, customer relationship management and strategic planning, quality assurance, enterprise-level systems deployment, software security architectures and best practices, and federal government security policies
-Knowledge of policy, identity, privilege, and attribute management
-Knowledge of digital cryptography and its uses, including signatures, encryption, and hash functions
-Knowledge of SOA and Web Services standards and specifications
-Knowledge of the application and security implications of XML, XML-Schema, XML-Digital Signature, XML-Encryption, SOAP, XACML, SAML, WS-Security, WSDL, UDDI, and WS-Trust
-Ability to obtain a security clearance
-BA or BS degree
Additional Qualifications:
-Experience with key participation in IA-related activities, including risk, vulnerability, and security assessments, certification and accreditation, security engineering, and network defense
-Knowledge of FISMA, FIPS, NIST, DIACAP, DCID 6/3, DoD 8500 series, and DoDAF
-Experience with determining system, network, or database security requirements and controls against various industry guidance and best practices, including FIPS, NIST, DIACAP/DITSCAP, and DCID 6/3
-Experience with supporting government certification and accreditation activities
-Knowledge of defense-in-depth and other information security and assurance principles and associated supporting technologies
-Experience with industry middleware appliances or applications, including UDDI registries, WSM products, XML firewalls, and Enterprise Service Buses a plus
-Knowledge of SQL, J2EE/.NET, C/C++, Python, and PHP
-Knowledge of the Java and .NET security models.
-Knowledge of security design patterns
-CISSP, GSLC, CISM, ISSEP, GIAC, or ISE2
-MS degree or Graduate Certificate in CS, Systems Engineering, or another IT related field
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
Integrating the full range of consulting capabilities, Booz Allen is the one firm that helps clients solve their toughest problems, working by their side to help them achieve their missions. Booz Allen is committed to delivering results that endure.
We are proud of our diverse environment, EOE, M/F/D/V.
Comments