Senior Cybersecurity Analyst — Cloud, DevSecOps & RMF Expert

Scientific Research Corporation; North Charleston (SC); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision plans

401(k) with company match

Paid time off (vacation and sick)

Job summary

Scientific Research Corporation seeks a highly qualified cyber engineer to provide expert oversight for secure IL6 cloud services, overseeing DevSecOps, RMF compliance, and cloud connectivity between AWS and USMC. The role demands system-wide risk assessment, remediation, and coordination with engineers and mission owners.

Requires a BS in a relevant field, 10+ years in security engineering, AWS experience, and a Security+ or higher certification; US citizenship and a security clearance are

Qualifications

• BS degree in engineering, physical science, physics, network security, computer science.
• 10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria.
• Experience with DevSecOps practices, secure CI/CD pipelines, configuration management, infrastructure as code, and secure software-delivery processes.
• Experience with cloud automation, and infrastructure-as-code tools (Ansible, Terraform, CloudFormation, Lambda).
• Experience with Python, JSON.
• Experience supporting secure cloud networking, network segmentation, routing, firewall policies, and cloud connectivity.
• Experience with Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), continuous monitoring, vulnerability management, and cyber security compliance.
• Experience developing cyber security documentation, operational procedures, security-control evidence, remediation plans, risk registers, and technical reports.
• Ability to identify operational cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure.
• Amazon Web Services (AWS) experience.
• Five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security.
• Desire to work in a secure lab environment.
• Holds a CompTIA Security+ or higher certification.

Responsibilities

• Providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure EDSO's confidentiality, integrity, and availability
• Modifying and implementing secure network connectivity between Amazon Web Services and the USMC
• Evaluating and remediating potential security risks, where identified
• Evaluating and remediating potential cloud, network, host, application, identity, firewall, load-balancing, WAF, and CI/CD pipeline security risk
• Supporting DevSecOps pipeline administration, including secure code integration, configuration management, software deployment, vulnerability scanning, dependency scanning, secrets management, and CI/CD security controls
• Supporting Cloud and network logging, alerting, monitoring, incident response, vulnerability remediation, and continuous compliance activities
• Coordinating with platform engineers, network engineers, system administrators, developers, mission owners, and customer-support personnel to validate cyber security controls; maintain operational security; resolve cyber security incidents; support system changes; and sustain secure, reliable, and available IL6 cloud services
• Provides operations and customer support for all services, to include, but not limited to: Operating System Maintenance, VPC Configuration, Infrastructure as Code Tools, Amazon Web Services (AWS), SCCA Network Components (Cisco Routers and F5 devices), SCCA firewall (Palo Alto), Identity and Access Management - Active Directory (AD), Multi-Factor Authentication, Intrusion Detection and Intrusion Prevention System (IDS/IPS), Assured Compliance Assessment Solution (ACAS), Microsoft Defender, Windows Server Update Services (WSUS), Online Certificate Status Protocol (OCSP)

Skills

DevSecOps

RMF

STIGs

Cloud networking

Python

JSON

Cyber security

Vulnerability management

Threat modeling

Leadership

Education

BS degree in engineering/physical science/physics/network security/computer science

Tools

AWS

Ansible

Terraform

CloudFormation

Lambda

Palo Alto

Active Directory

Job description

Scientific Research Corporation seeks a highly qualified cyber engineer to provide expert oversight for secure IL6 cloud services, overseeing DevSecOps, RMF compliance, and cloud connectivity between AWS and USMC. The role demands system-wide risk assessment, remediation, and coordination with engineers and mission owners.

Requires a BS in a relevant field, 10+ years in security engineering, AWS experience, and a Security+ or higher certification; US citizenship and a security clearance are