Cloud ISSE

Waypoint Human Capital; Chantilly (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Waypoint Human Capital is recruiting a Cloud Information Systems Security Engineer (ISSE) to support a client’s cybersecurity program in Chantilly, VA. The role focuses on analytical and technical security guidance, RMF compliance, and cloud-security engineering across AWS/Azure/Google and other CSPs.

The ISSE will review system security documentation, validate security controls, and work with development teams to ensure secure cloud migrations while maintaining TS/SCI with poly requirements and

Qualifications

• BS with 10–12 years of experience, MS with 8–10 years of experience, or Ph.D. with 5–7 years of experience.
• Must possess and be able to maintain a TS/SCI with Polygraph.
• Able to support the client’s core hours (9:00 AM–3:00 PM, Monday–Friday).
• Cloud certification and demonstrated experience providing security engineering to cloud capabilities and solutions.

Responsibilities

• Provide analytical and technical security recommendations to the client.
• Identify projects’ security requirements.
• Provide security recommendations for systems using cloud services.
• Participate in network design reviews and security testing for the client’s networks.
• Coordinate with system development teams to ensure network security standards are being followed and implemented correctly.
• Identify additional security requirements based on RMF or as the result of security issues that put the client’s systems at risk.
• Review and analyze new systems and provide recommendations concerning their security.
• Review SRTMs, SSPs, and IA documentation for completeness.

Skills

Cloud security

RMF

NIST RMF

DoD 8570/8140 IAT III

Cloud certification

Security engineering

Unix/Linux

Education

BS

MS

PhD

Tools

Retina

HBSS

EVSS

ACAS

ECDS

AWS/Azure/Google

Job description

Position Title: Cloud Information Systems Security Engineer (ISSE)
Position Type: Full-Time, On-Site
Location: Chantilly, VA
Clearance: Active TS/SCI with CI Poly
Waypoint’s client is seeking a Cloud Information Systems Security Engineer (ISSE) to provide support in the area of Cyber Security. This position focuses on providing analytical and technical security recommendations, identifying security requirements, and ensuring cloud-based systems and networks comply with established cybersecurity standards and the Risk Management Framework (RMF).

Responsibilities:

• Provide analytical and technical security recommendations to the client.
• Identify projects’ security requirements.
• Provide security recommendations for systems using cloud services.
• Participate in network design reviews and security testing for the client’s networks.
• Coordinate with system development teams to ensure network security standards are being followed and implemented correctly.
• Identify additional security requirements based on RMF or as the result of security issues that put the client’s systems at risk.
• Review and analyze new systems (hardware and software) and provide recommendations concerning their security.
• Review Security Requirements Traceability Matrixes (SRTMs), System Security Plans (SSPs), and other IA documentation for completeness.

Required:

• Must possess and be able to maintain a TS/SCI with Polygraph.
• BS with 10–12 years of experience, MS with 8–10 years of experience, or Ph.D. with 5–7 years of experience.
• Able to support the client’s core hours (9:00 AM–3:00 PM, Monday–Friday).
• An Advanced Cyber Certification (DoD 8570/8140 IAT Level III).
• Cloud certification.
• Demonstrated experience providing security engineering to cloud capabilities and solutions in AWS, Azure, Google, Oracle, or other CSPs.
• Excellent verbal and non-verbal communication skills.
• Demonstrated expertise and experience in networking protocols and concepts.
• Demonstrated knowledge and experience in software-defined networking principles and technologies.
• Demonstrated experience providing security engineering support to capability migration from on-prem to cloud.
• Demonstrated knowledge and experience in the NIST RMF.
• Demonstrated expertise and experience in cybersecurity principles.
• Demonstrated experience with Unix/Linux and Windows operating systems.

Desired:

• Demonstrated cloud architecting experience (e.g., AWS Solutions Architect).
• Systems Engineering (configuration management, requirements management/writing, architecture, interfaces).
• Knowledge of the client’s infrastructure.
• Familiarity with the client’s IA processes.
• Bachelor of Science degree in Science, Technology, Engineering, or Mathematics (STEM).
• Self-starter requiring limited direction and supervision.
• Experience briefing senior client personnel.
• Ability to organize and prioritize numerous client requests in a fast-paced, deadline-driven environment.
• Experience with IA vulnerability testing and related network and system test tools (i.e., Retina, HBSS, EVSS, ACAS).
• Familiarity with Enterprise Cross Domain Solutions (ECDS).
• Experience supporting IC or DoD in the Cyber Security Domain.