Health IT Cybersecurity Engineer (Remote/Hybrid) | AWS & Compliance

Cormac Corporation; Leesburg (VA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work options

Job summary

Cormac Corporation in Leesburg, VA, seeks a Cybersecurity Engineer to safeguard CMS Reporting and Quality systems in AWS Cloud. You will guide teams on security policy, risk and compliance, and work hands-on with DevOps to remediate findings.

This role emphasizes governance, vulnerability management, and data protection for PII/PHI in a federal healthcare context. Responsibilities include securing IAM, KMS, and logging, defending ATO artifacts, and communicating security risks to leadership and

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related field.
• U.S. Citizenship and ability to obtain Public Trust (Tier I) clearance.
• 8+ years of progressive information security or cybersecurity experience.
• Experience owning and defending an Authorization to Operate (ATO) and related artifacts.
• Hands-on vulnerability and compliance scanning with AWS Inspector and AWS Security Hub.
• Strong ability to secure AWS cloud environments (IAM, KMS, Security Groups, CloudWatch).

Responsibilities

• Guide Product Owners, ISSOs, engineering and infra staff on security policies and procedures.
• Analyze CMS security requirements (FISMA, FedRAMP, HIPAA, NIST) for non-security teams.
• Develop and defend System Security Plans, incident response and contingency plans.
• Conduct vulnerability and compliance assessments; determine remediation priorities.
• Drive closure of security findings with developers, DevOps and infra engineers.
• Secure AWS environment with IAM least-privilege, KMS, CloudWatch monitoring and logging.
• Review identity integration (HARP/IDM) including authentication and access lifecycle.
• Respond to alerts, investigate incidents, and maintain security dashboards.
• Present vulnerability/compliance reviews to Government stakeholders and plan activity.
• Secure Databricks environments and protect PII/PHI data.
• Track findings in ServiceNow and monitor logs in CloudWatch and New Relic.
• Assess AI/LLM security implications and educate teams on secure development.

Skills

Regulatory compliance

Security governance

Cloud security architecture

Vulnerability management

Incident response

ATO ownership

DevSecOps (Agile)

Education

Bachelor's degree in Cybersecurity, Computer Science, IT

Master's degree in Cybersecurity, Computer Science, IT

Tools

AWS Inspector

AWS Security Hub

IAM

KMS

CloudWatch

Job description

Cormac Corporation in Leesburg, VA, seeks a Cybersecurity Engineer to safeguard CMS Reporting and Quality systems in AWS Cloud. You will guide teams on security policy, risk and compliance, and work hands-on with DevOps to remediate findings.

This role emphasizes governance, vulnerability management, and data protection for PII/PHI in a federal healthcare context. Responsibilities include securing IAM, KMS, and logging, defending ATO artifacts, and communicating security risks to leadership and