Security Engineer - Cloud Security & Threat Modeling

ASM Research, An Accenture Federal Services Company; City of Albany (NY); On-site; USD 120,000 - 132,000; Full time

Job summary

ASM Research is seeking a Security Engineer to protect the CMS HIOS platform in a complex federal production environment. You will design, implement, and maintain robust security controls for cloud infrastructure and sensitive data.

The role involves automating security processes, evaluating risk with monitoring tools, and ensuring compliance with industry standards and CSP requirements. Collaboration within an Agile cross-functional team is essential.

Qualifications

• Bachelor’s degree required and relevant security experience.
• Four or more years in compliance, identity, networking, data security, and cloud security, with monitoring experience.

Responsibilities

• Research security issues and assist in creating new security technology solutions.
• Design and develop scripts to automate security control workflow lifecycle.
• Evaluate overall risk using monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM, vulnerability scans).
• Develop and implement information security procedures aligning with industry best practices and compliance requirements.
• Execute large client data classification and security assessments.
• Develop and enforce policies for secure API key generation, storage, and rotation.
• Manage remediation plans to support risk assessment goals.
• Conduct threat modeling to identify potential risks and vulnerabilities.
• Follow CMS security, accessibility, documentation, configuration management, and SDLC requirements.
• Provide technical guidance and security knowledge sharing to teammates.

Skills

Monitoring solutions

Scripting

Zero Trust Architecture

AWS/Azure

Security Remediation

PKI and API Key Management

Threat Modeling

Certificates Management

Okta

Kali Linux

Red Teaming

Hack-the-Box

Capture-the-Flag

Pen Testing

MITRE ATT&CK Framework

Cloud security principles

Education

Bachelor’s Degree

Tools

Splunk

New Relic

SIEM

Vulnerability Scanners

Job description

ASM Research is seeking a Security Engineer to protect the CMS HIOS platform in a complex federal production environment. You will design, implement, and maintain robust security controls for cloud infrastructure and sensitive data.

The role involves automating security processes, evaluating risk with monitoring tools, and ensuring compliance with industry standards and CSP requirements. Collaboration within an Agile cross-functional team is essential.