Security Lead - Senior Cloud Security Engineer

UNAVAILABLE; McLean (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

UNAVAILABLE Senior Cloud Security Engineer position in McLean, VA, United States, focuses on DevSecOps and secure cloud architectures for migration, optimization, and deployment. You will implement zero-trust components, IAM policies, and data privacy controls while aligning security with usability.

Responsibilities include monitoring cloud environments, performing threat modeling, risk assessments, and automating vulnerability and patch management.

Qualifications

• Ability to obtain a U.S. government Security Clearance.
• Bachelor's degree in an IT-related field.
• 7+ years of experience architecting, designing, developing, and implementing cloud solutions.
• 5+ years of experience with AWS.
• 5+ years of experience with Git SCM providers such as GitHub, GitLab, Bitbucket.
• 7+ years of experience supporting systems development within an Agile environment.
• 5+ years of experience implementing infrastructure as code and orchestration.
• 5+ years of experience conducting monitoring, risk assessment, threat modeling, and security testing in cloud environments.
• 5+ years of experience documenting POA&M, SSP, and A&A support documentation.
• Must possess an AWS Certified Cloud Practitioner certification or an AWS Associate-, Professional-, or Specialty-level certification.

Responsibilities

• Identify and implement the most secure cloud-based solutions for the customer including components for zero-trust architectures, IAM policy, and data privacy.
• Understand the needs of stakeholders and optimize solutions that marry security with usability.
• Monitor cloud environments for suspicious activities with cloud-native monitoring or SIEM solutions and investigate security incidents where appropriate.
• Examine infrastructure as code written by others and analyze risk.
• Ensure that systems are safe and secure against cybersecurity threats through risk assessment, threat modeling, and compliance with industry standards (e.g. NIST, ISO 27011, HIPAA, FISMA).
• Identify technical problems, perform root cause analysis, and develop updates and 'fixes'.
• Automate security processes such as vulnerability management and patch management.
• Work with software developers and DevSecOps engineers to ensure that development follows established security processes and works as intended.
• Support enterprise cloud security through infrastructure as code including activities around automated server or network configurations, large-scale software deployments, and monitoring and testing.
• Ensure effective design and implementation of data protection and encryption mechanisms for data at rest and in transit.
• Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations.
• Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues.
• Act as an individual contributor and mentor more junior team members.
• Engineer and implement solutions and provide recommendations for continuous improvement for the services provided.
• Present regular status updates and provide cross training to other team members.

Skills

Security clearance

Cloud security

Zero-trust

IAM policy

Data privacy

Threat modeling

Monitoring

Scripting languages

Automation tools

Agile

Education

Bachelor's degree in IT-related field

AWS Certification (Cloud Practitioner / Associate / Professional / Specialty)

CISSP

Tools

AWS

Git

Job description

Overview

As a Senior Cloud Security Engineer, you will work within our growing DevSecOps practice delivering features to support developing, testing, andmonitoringsecure cloud architectures for cloud migration, cloudoptimization and cloud deployment. We are looking for candidates with experiencewith cloud platform services,cybersecurityand DevOps practices such asinfrastructure ascode and confirmation management automation.

Responsibilities

• Identifyand implement the mostsecurecloud-based solutions forthe customerincluding components for zero-trust architectures, identity and access management policy, and data privacy
• Understand the needs of stakeholders andoptimizesolutions that marry security with usability
• Monitor cloud environments for suspicious activities with cloud native monitoring or SIEM solutions and investigate security incidents whereappropriate
• Examineinfrastructure ascode written by others and analyzingrisk
• Ensurethat systems are safe and secure against cybersecurity threatsthrough risk assessment, threat modeling, and compliance with industry standards (e.g.NIST, ISO 27011, HIPPA, FISMA, etc.)
• Identifytechnical problems, perform root cause analysis, and developupdates and 'fixes'
• Automate security processes such as vulnerability management and patch management
• Work with software developers and DevSecOps engineers to ensure that development follows establishedsecurityprocesses and works as intended
• Supportenterprisecloud securitythroughinfrastructure as code including any activities around automated server or network configurations, large-scale software deployments, and monitoring and testing
• Ensureeffective design and implementation of data protection and encryption mechanisms for data at rest and in transit
• Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations
• Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues
• Act as an individual contributor and mentor more junior team members
• Engineer and implement solutions and provide recommendations for continuous improvement for the services provided
• Present regular status updates and provide cross training to other team members

Qualifications

• Ability to obtain a U.S. government Security Clearance
• Bachelor'sDegree in an IT-relatedfield
• 7+years ofexperiencearchitecting, designing, developing, and implementing cloud solutions
• 5+years ofexperience with AWS
• 5+years ofexperience with Git SCM providers such as GitHub, GitLab, Bitbucket
• 7+years ofexperiencesupportingsystems developmentwithin an Agile environment
• 5+years ofexperience implementing infrastructure as code and orchestration
• 5+years ofexperienceconducting monitoring, risk assessment, threatmodeling,and security testing in cloud environments
• 5+years ofexperience documenting POA&M, SSP, and A&A support documentation
• Must possess an AWS Certified Cloud Practitioner certification or an AWS Associate-, Professional-, or Specialty-level certification

Preferred:

• Certifications:
  • AWS CertifiedSecurity-Specialty
  • AWS Certified SolutionArchitect-Associate
  • Certified Information Systems Security Professional (CISSP)
• Excellent written and verbal communication skills, interpersonal,and collaborative skills
• Experience with documenting an as-is state of the environment, performinga gap analysis, and producingartifacts that articulate options and recommendations
• Experience with scripting inlanguages such asBash, PowerShell, Python, Groovy, or Ruby
• Experience with automation tools, including Pivotal, Chef, Terraform, CloudFormation, or Ansible