Cyber Security Project Engineer

Rsekure Llc.; Chantilly (VA); On-site; USD 200,000 - 250,000; Full time

Job summary

RSekure Llc. is seeking a Cyber Security Project Engineer in Chantilly, VA to manage security assessments, compliance, change management, and continuous monitoring across AWS, Google Cloud, Oracle Cloud, and Microsoft Azure.

The role requires a blend of technical and policy knowledge, including RMF and secure engineering practices, with protection of high-sensitivity data. Local travel and coordination with program management are involved.

Qualifications

• Bachelor's degree or equivalent experience required.
• 7+ years of ISSE/ISSO/ISSM experience required.
• Experience conducting security assessments for cloud infrastructure.
• Experience with cloud providers (AWS, GCP, Azure, Oracle Cloud) preferred.
• Familiarity with NIST RMF and security control assessments.

Responsibilities

• Conduct security assessments for cloud infrastructure and services.
• Facilitate TEMs with cloud providers to review architectures.
• Design/implement and review systems using cloud technologies (AWS, Azure, Oracle, Google).
• Monitor and close POA&Ms and track assessment activities.
• Prepare technical reports, program highlights, and leadership briefings.

Skills

Security assessments

Cloud security

Policy & compliance

PM/leadership

Cross-domain designs

Vulnerability monitoring

POA&Ms management

NIST RMF

SCA preparation

Security engineering

Education

Bachelor's degree or equivalent experience

Tools

Xacta 360

Risk Vision

RSA Archer

Rapid7

Nessus

Qualys

Job description

Job Title: Cyber Security Project Engineer

Reports To: RSekure Program Manager

Location: Chantilly, VA

Schedule: Monday - Friday

Hours: Full-time, 40-hours/week

FLSA Status: Salaried, exempt

Clearance: TS/SCI - Full-Scope Polygraph

Position Summary

The Cyber Security Project Engineer manages security assessment, security compliance, change management, and continuous monitoring responsibilities across four (4) cloud service providers: Amazon Web Services, Google Cloud, Oracle Cloud, and Microsoft Azure.

This position requires a healthy mix of technical and policy knowledge and requires support in understanding and implementing standards like NIST Risk Management Framework and cloud technologies. The position also requires proficiency in information system security engineering and security control assessment.

Essential Duties and Responsibilities

• Demonstrated experience conducting security assessments, particularly for cloud infrastructure and cloud services.
• Demonstrated experience facilitating TEMs with cloud service providers to review cloud service architectures
• Demonstrated experience designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, or Microsoft Azure cloud architecture.
• Demonstrated experience utilizing or reviewing cross domain technology and common architecture designs.
• Demonstrated experience with continuous monitoring requirements to include scan analysis for critical or high findings with common scan tools such as Rapid 7, Nessus, and Qualys.
• Demonstrated experience monitoring or closing Plan of Action and Milestone items (POA&Ms).
• Demonstrated experience utilizing compliance tools to track assessment and authorization activities such as Xacta 360, Risk Vision, RSA Archer.
• Demonstrated experience with the common control provider concept within the NIST Risk Management Framework.
• Demonstrated experience with security control assessments to include working with SCAs and preparing security packages for SCAs.
• Demonstrated experience conducting information system security engineering activities.
• Demonstrated project management experience including project planning, task tracking, milestone management, and resource coordination
• Demonstrated experience developing and maintaining program metrics, performance indicators, and compliance status dashboards
• Demonstrated experience preparing technical reports, program highlights, status briefings, and leadership communications
• The ability to work well independently as well as part of a team.
• Complete required compliance training as assigned.
• Other duties as assigned.

Education & Work Experience

• Bachelor's degree or equivalent experience
• 7+ years of ISSE/ISSO/ISSM experience

Travel

• Local and CONUS TDY travel as needed

Compensation

• Salary up to $250,000 commensurate with experience

Work Environment

Employee will be working indoors in an office environment with other people. Potential moderate temperature fluctuations. Typical indoor and computer-related noise level, and typical office, paper, and equipment-related dust. Exposure to video display terminals occurs on a regular basis.

Physical Demands

To successfully perform the essential functions of the job, the employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear; see to read printed materials and computer screens; mobility to work in a typical office setting. Ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and may be required to provide recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee must be able to lift and/or move moderate amounts of weight, typically up to 20 pounds. Regular and predictable attendance is essential.

ADA:

RSekure will make reasonable accommodations in compliance with the Americans with Disabilities Act of 1990.

EEO/AA:

RSekure does not discriminate based on race, color, national origin, sex, religion, age, disability, sexual orientation, gender identity, veteran status, height, weight, or marital status in employment or the provision of services and is an equal access/equal opportunity/affirmative action employer.

This job description is not intended to be an all-inclusive list of duties and standards of the position and will be reviewed periodically as duties and responsibilities change with business necessity. Essential job functions are subject to modification. Incumbents will follow any other instructions, and perform any other related duties, as assigned by their supervisor.