Cloud Security Engineer: Automation and Threat Modeling

ASM Research, An Accenture Federal Services Company; Montpelier (VT); On-site; USD 120,000 - 132,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Security Engineer to enhance the HIOS Platform Team’s security posture in a complex federal production environment. You will safeguard cloud infrastructure and sensitive data by designing, implementing, and maintaining robust security solutions, while automating workflows and ensuring regulatory compliance.

The role involves cross-functional Agile collaboration, risk evaluation using monitoring tools, and contributing to

Qualifications

• Bachelor’s degree required and four years of relevant security experience.

Responsibilities

• Research security issues and assist in creating new security technology solutions.
• Design and develop scripts to automate security control workflow lifecycle.
• Evaluate risk using monitoring systems and tools (Splunk, New Relic, SIEM, vulnerability scans).
• Develop and enforce policies for secure API key generation, storage, and rotation.
• Conduct threat modeling exercises to identify risks and vulnerabilities.
• Follow CMS security, accessibility, documentation, and SDLC requirements.
• Provide technical guidance and security knowledge sharing to team members.

Skills

Monitoring solutions

Scripting

Zero Trust Architecture

AWS/Azure

Security Remediation

PKI and API Key Management

Threat Modeling

Certificates Management

Okta

Kali Linux

Red Teaming

Hack-the-Box

Capture-the-Flag

Pen Testing

MITRE ATT&CK Framework

Cloud security principles

Education

Bachelor's Degree

Tools

Splunk

New Relic

SIEM

Vulnerability Scans

Job description

ASM Research, An Accenture Federal Services Company, is seeking a Security Engineer to enhance the HIOS Platform Team’s security posture in a complex federal production environment. You will safeguard cloud infrastructure and sensitive data by designing, implementing, and maintaining robust security solutions, while automating workflows and ensuring regulatory compliance.

The role involves cross-functional Agile collaboration, risk evaluation using monitoring tools, and contributing to