Cybersecurity Incident Response Program and Plan Architect, Senior

Key Role:

Analyze programs, policies, plans, processes, playbooks, runbooks, manuals, and job aids to proactively prevent and mitigate impact from cybersecurity incidents and events. Apply advanced consulting skills, extensive technical expertise, and industry knowledge to harden programs and systems against malware attacks, insider threats, social engineering, and loss of service scenarios. Analyze and evaluate existing client documentation and conduct client interviews to determine current state and design work products and deliverables. Create innovative solutions to complex problems through ground up development or enhancements to existing functions and material. Support or lead workshops and training sessions to support familiarization of work products, deliverables, program maturity roadmaps, and newly developed and upgraded cyber incident response material.  Work without considerable direction. Mentor and supervise team members. This position is open to remote delivery anywhere within the U.S., to include the District of Columbia. 

Basic Qualifications:

  • 3+ years of experience with cybersecurity incident response, crisis management, or risk management

  • Experience in developing and designing cyber security incident response programs and related material

  • Experience in supporting training and briefing sessions

  • Experience in drafting reports

  • Experience in communicating findings

  • Knowledge of cybersecurity, incident response, and crisis management principles

  • Ability to demonstrate creativity and apply industry best practices in development and design of solutions

  • Ability to leverage available learning resources, including internal and external

  • Bachelor’s degree

Additional Qualifications:

  • Experience in cybersecurity incident response

  • Experience in leading assessments, analyzing results, and developing strategies to improve cybersecurity incident programs

  • Experience in leading client interviews, workshops, and client management

  • Knowledge of NIST Cybersecurity Framework, NIST SP 800-34, NIST SP 800-53, NIST SP 800-160, or NIST SP 800-171

  • Knowledge of determining security control effectiveness and maturity

  • Knowledge of business continuity, disaster recovery, organizational resiliency, and backup and restore principles

  • Knowledge of corporate governance, effective management, and organizational design and behavior principles

The proposed salary range for this position in Colorado is 100,000 to 130,000. Final salary will be determined based on various factors.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choice, and support your total well-being. Our comprehensive benefit offerings include healthcare, retirement plan, insurance programs, commuter program, employee assistance program, paid and unpaid leave programs, education assistance, and childcare
benefits.

We’re an EOE that empowers our people—no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or other protected characteristic—to fearlessly drive change.

Not ready to apply? Join our talent community and sign up for job alerts.