Sr. Cloud Security Engineer (NIN-AE4-18.062325)

Capital Solutions Group; Linthicum (MD); On-site; USD 120,000 - 170,000; Full time

Job summary

A leading company is seeking a Sr. Cloud Security Engineer to enhance cloud security compliance. The role includes developing AWS guidance, analyzing security processes, and collaborating on security controls. Ideal candidates will have experience in cloud security and a strong understanding of RMF principles, with the opportunity to work in a dynamic and diverse environment.

Qualifications

• Experience with Security in the Cloud, particularly AWS.
• Strong understanding of RMF and its application.
• Excellent analytical, problem-solving, and communication skills.

Responsibilities

• Develop AWS service-specific guidance for managing Sensitive Data and Ultra-Sensitive Data.
• Review RMF guidelines for cloud environments.
• Provide recommendations on transitioning solutions to cloud.

Skills

Cloud Security

Risk Management Framework (RMF)

Analytical Skills

Problem-Solving

Communication skills

Education

Degree in Computer Science or IT

Tools

Python

Node.Js

YAML

Job description

SECURITY CLEARANCE: TS/SCI with both Polygraphs is required

POSITION: Sr. Cloud Security Engineer

LCAT: Application Engineer, Level 4

REQUISITION: NIN-AE4-18.062325

LOCATION: Linthicum, Maryland

OVERVIEW:

Join our "Security in the Cloud" team dedicated to enhancing the security posture of our cloud environments. The team is responsible for developing and maintaining AWS service-specific guidance for handling Sensitive Data (SD) and Ultra-Sensitive Data (USD), ensuring compliance with specific handling requirements and caveats. The ideal candidate will possess a strong security engineering background, with experience in security frameworks and cloud security practices, and will contribute to process improvements and risk mitigation strategies.

JOB DESCRIPTION:

• Develop and document AWS service-specific guidance for managing Sensitive Data (SD) and Ultra-Sensitive Data (USD), including handling caveats and read-in procedures.

• Review and interpret Risk Management Framework (RMF) guidelines applicable to on-premises and cloud environments.

• Analyze existing on-premises security processes and translate them into cloud security best practices aligned with RMF standards.

• Provide recommendations to government stakeholders on transitioning solutions from on-premises to cloud environments, ensuring compliance with security policies and frameworks.

• Collaborate with cross-functional teams to implement security controls and ensure secure cloud deployments.

Assist in security assessments, audits, and continuous improvement initiatives related to cloud environments.

• Keep abreast of evolving cloud security standards, AWS services, and relevant certifications.

Required Qualifications:

• Experience with Security in the Cloud, particularly AWS.

Strong understanding of the Risk Management Framework (RMF) and its application to cloud transitions.

• Excellent analytical, problem-solving, and communication skills.

• Experience with secure data handling and classification.

Knowledge of cloud security best practices and compliance standards.

• Ability to work with government or research environments.

Other technologies utilized: Python, Node.Js, YAML

DESIRED QUALIFICATIONS:

• AWS certifications (e.g., AWS Security Specialty, Solutions Architect, etc.)

///////////////////////////////////

LCAT QUALIFICATIONS:

CERTIFICATION: n/a

EDUCATION: NOTE: Degree in computer science or IT computer engineering from an accredited college or university.

PROFESSIONAL EXPERIENCE:

• Master's Degree + 6 years, or

• Bachelor's Degree + 8 years, or

• Associates Degree + 10 years, or

• No Degree + 12 years.

CSG, Inc. is an Equal Opportunity / Affirmative Action employer that values the strength of diversity in the workplace. All qualified applicants will receive consideration for employment without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, veteran status, or any other characteristic protected by law.