Cloud Cyber Security Engineer | TS/SCI | DevSecOps

PVH (Tommy Hilfiger/Calvin Klein); Sterling (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

CACI/BITS seeks a Cyber Security Engineer to support a large cloud-enabled program. You will review changes, implement security controls, and develop cyber monitoring and response plans for multi-application environments.

The role requires deep understanding of software development, system administration, and holistic security practices to meet high security requirements across domains.

Qualifications

• Active TS/SCI clearance with Poly required.
• Bachelor's degree in information systems, systems engineering, electrical engineering, IT, or related field.
• 5+ years of relevant experience (or 7+ years without related degree).
• Understanding of IA principles and organizational requirements.
• Experience with DOD/IC System Security control requirements.
• Knowledge of information security systems engineering principles and IT security technologies.

Responsibilities

• Review audit logs and create mitigation and corrective action plans.
• Use forensic tools for attack reconstructions to fix vulnerabilities.
• Work with development teams to manage data connections and security certificates.
• Apply cloud, network, and security best practices to minimize risk.
• Implement and improve DevSecOps in Linux/Cloud based development environments.
• Develop security architectures to protect against cyber attacks.
• Coordinate with ISOs and security control assessors early in design.

Skills

Cloud security

DevSecOps

Zero trust concepts

Security engineering

Network security

Education

Bachelor's degree in information systems or related field

Tools

Firewalls

Encryption

Proxies

Linux/Cloud development

Job description

CACI/BITS seeks a Cyber Security Engineer to support a large cloud-enabled program. You will review changes, implement security controls, and develop cyber monitoring and response plans for multi-application environments.

The role requires deep understanding of software development, system administration, and holistic security practices to meet high security requirements across domains.