On-Site Cybersecurity Engineer – Cloud & Compliance (Poly)

Bespoke Technologies, Inc.; Herndon, Northern (VA, KY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Bespoke Technologies, Inc. in Herndon, VA seeks a Cyber Security Engineer with active Poly clearance for on-site work. The role focuses on security assessments of cloud infrastructure, collaboration with cloud providers, and RMF-based risk management.

Candidates should demonstrate experience with A&A, POA&Ms, and security architecture reviews. The position requires strong project management, technical reporting, and the ability to produce leadership-ready briefs on security posture and program

Qualifications

• Experience conducting security assessments for cloud infrastructure/services.
• Experience facilitating TEMs with cloud service providers to review cloud architectures.
• Experience designing/reviewing systems using cloud platforms (AWS, Oracle Cloud, Google Cloud, or Azure).
• Experience with cross-domain technology and common architecture designs.
• Experience with continuous monitoring and scan analysis using common tools (Rapid7, Nessus, Qualys).
• Experience closing POA&Ms and tracking assessment activities with compliance tools (Xacta 360, Risk Vision, RSA Archer).
• Familiarity with NIST RMF, security control assessments, and preparing security packages for SCAs.
• Experience information system security engineering activities and project management including milestones and metrics.

Responsibilities

• Lead security assessments for cloud-based systems and services.
• Coordinate with cloud providers to review architectures and ensure compliance.
• Develop and maintain program metrics, performance indicators, and dashboards for leadership.
• Prepare technical reports, status briefings, and leadership communications.

Skills

Security assessments

Cloud security

POA&Ms

NIST RMF

Project management

Tools

Xacta 360

Risk Vision

RSA Archer

Nessus

Rapid7

Qualys

Job description

Bespoke Technologies, Inc. in Herndon, VA seeks a Cyber Security Engineer with active Poly clearance for on-site work. The role focuses on security assessments of cloud infrastructure, collaboration with cloud providers, and RMF-based risk management.

Candidates should demonstrate experience with A&A, POA&Ms, and security architecture reviews. The position requires strong project management, technical reporting, and the ability to produce leadership-ready briefs on security posture and program