CLOUD SECURITY ENGINEER

LeoRose Consulting; Tohatchi (NM); On-site; USD 95,000 - 105,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k matching

Job summary

LeoRose Consulting seeks a Cyber Security Engineer (Cloud/ATO Steward) to collaborate with system owners on ATO packages and RMF compliance. You will map artifacts to NIST 800-53 controls and help with POAMs, eMASS navigation, and control implementation statements.

The role supports remote delivery anywhere in the U.S. and requires experience with ATO processes, artifact orchestration, and client management. Compensation ranges from $95,000 to $105,000 per year.

Qualifications

• Experience with eMASS and RMF processes is required.
• Experience developing and reviewing ATO artifacts, POA&M, and security controls.
• Experience leading cyber teams and client engagements.
• Knowledge of RMF and NIST 800-53 Rev. 4.
• Ability to facilitate meetings with stakeholders.
• Ability to analyze authorization documents and identify gaps.
• Based in the U.S. and able to work standard hours (EST)

Responsibilities

• Create ATO packages with system owners and map artifacts to NIST 800-53 controls.
• Review and help write control implementation statements.
• Assist system teams with POAM management and eMASS workflow guidance.
• Provide guidance and support throughout the RMF process.
• Coordinate with system stakeholders to address authorization gaps.

Skills

Leadership

Client management

Meeting facilitation

Independent work

Communication (EST hours)

Education

CISSP/CISA/CAP/CISM/CRISC

Tools

eMASS

STIG Viewer

TENABLE/Nessus

Job description

As a Cyber Security Engineer (Cloud/ATO Steward) you will work with system owners to create their ATO packages. Review and create artifacts that comply with the VA’s authorization requirements, and compliance and map those artifacts to the appropriate NIST 800-53 controls such as Assessment Procedures (AP) testing and evaluation. Review and help to write control implementation statements. Work with system teams to review, update, and create their POAMs and help system teams to navigate the Enterprise Mission Assurance Support System (eMASS) GRC tool. Provide guidance and support to system teams throughout every step of the RMF process and eMASS workflow. This position is open to remote delivery anywhere within the U.S., including the District of Columbia.

Required Experience

• Must have experience with eMASS
• Experience with supporting system Authority to Operate (ATO) processes, Artifact Development processes, Security Control implementation details, and Plan Of Action & Milestones (POA&M)
• Experience with leading and managing cyber teams
• Experience with client management and engagement
• Knowledge of the Risk Management Framework (RMF) and NIST 800-53 Rev. 4
• Ability to facilitate meetings
• Ability to analyze authorization documents and associated artifacts against authorization requirements to identify gaps, establish a schedule to address outstanding authorization requirements, coordinate directly with system team stakeholders, and implement work activities in accordance with established Standard Operating Procedures (SOPs)
• Ability to work independently and in teams
• Ability to work core business hours of 8 AM to 5 PM (EST), Monday through Friday

Preferred Experience

• Experience with ATO requirements, artifact orchestration, and review experience
• Experience with POAM Lifecycle management
• Experience with the Security Technical Implementation Guide (STIG) Viewer
• Experience with federal IT and Cloud security policies
• Knowledge of the system security scanner Tenable and or Nessus
• Knowledge of information technology concepts, cloud computing methodologies (PAAS, SAAS, IAAS), FedRAMP/AWS GovCloud, network/server topologies, and configurations
• Ability to articulate authorization requirements to varying degrees of staff/leadership
• CISSP or CISA or CAP or CISM or CRISC certification

• Full benefits include medical, dental, vision, STD, LTD, Life, PTO, and a 401k matching program.

Full-time W2 position, 100% remote, must be based in the U.S. and a U.S. Citizen.

Compensation for this role is $95,000-$105,000/year.

Candidates who do not meet minimum requirements will not be considered.