TASS (Current Contract) - Cloud Assessment Lead Cybersecurity Engineer – Sr (Cloud Security Ass[...]

AGE Solutions LLC; Fort Meade (MD); On-site; USD 115,000 - 130,000; Full time

Benefits offered by this job

26 Days Paid Leave

Performance Bonuses

401(k) with Match

Health Benefits

Parental Leave

Professional Growth

Job summary

A premier technology services provider is seeking a Senior Cloud Security Assessor Team Lead in Fort Meade, Maryland. The role involves leading a team in supporting cloud security assessments for DoD customers, ensuring compliance with FedRAMP and NIST standards. Ideal candidates will have extensive experience in cybersecurity, cloud security assessment, and a strong understanding of risk analysis. This position offers a competitive salary between $115,000 - $130,000 and excellent benefits including paid leave and performance bonuses.

Qualifications

• Eight years of experience in cybersecurity or network security.
• Five years of experience in cloud security assessment or continuous monitoring roles.
• Strong knowledge of FedRAMP, NIST SP 800-53, and related frameworks.

Responsibilities

• Lead and manage the Assessment Team for cybersecurity programs.
• Ensure deliverables are submitted on time and meet quality standards.
• Provide mission area support in cloud security and compliance.

Skills

Cloud Security Assessment

Cybersecurity Compliance

Risk Analysis

Team Leadership

Communication Skills

Education

Bachelor's degree (IT-related field preferred)

Tools

eMASS

Vulnerability Scanning Tools

SIEM Platforms

Job description

About Us

AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.

AGE Solutions is looking for a Senior Cloud Security Assessor Team Lead in support of a cybersecurity risk management and assessment program with our DoD customer. In this position, you will lead a team of thirteen personnel to ensure DoD and FedRAMP Cloud Authorization ongoing support to include ConMon, annual reviews and extensions, and significant change requests (SCRs) of CSPs through reviews, recommendations, written reports, and briefings.

Individuals in this role must be available to work on-site at Ft. Meade, MD for the majority of the workweek.

Essential Duties And Responsibilities

• Lead the Assessment Team ensuring administrative tasks are completed. Meet with the Director as required and ensure government requirements are satisfied. Attend all required meetings as a representative AGE.
• Ensure all deliverables are of the proper quality, submitted on time and within schedule.
• Manage team resources, coordinate schedules and ensure staff is compliant with government requirements.
• Provide guidance to all tasks to ensure appropriate coordination with cloud cybersecurity and architecture organizations is accomplished to support mission areas.
• Provide the mission area support in collaborating with IT and cybersecurity teams to ensure cloud security architectures are aligned with overall business objectives and compliance requirements.
• Collaborate with the cybersecurity team to ensure cloud security architectures are aligned with overall business objectives and compliance requirements outlined in the Cloud Computing SRG.
• Provide expert guidance on cloud security matters related to CSOs for technical and non-technical stakeholders.
• Evaluate and develop Monthly One Pagers that summarize the cybersecurity posture of Cloud Service Offerings (CSOs)
• Perform Annual Assessments to validate the implementation of mandatory security controls across the CSO baseline and assess one-third of the remaining controls annually
• Prepare and review weekly Playbooks to report on the Continuous Monitoring (ConMon) status of designated CSOs
• Review and assess Security Change Requests (SCRs) that propose new requirements or capabilities for CSOs
• Analyze scan data, Plans of Action and Milestones (POA&Ms), and other change artifacts to assess ongoing risk posture changes of Cloud Service Providers (CSPs)
• Ensure the DoD and FedRAMP monitoring programs enable effective oversight of CSPs by providing risk-based data to inform Authorizing Officials (AOs)
• Perform ongoing assessments and validations to confirm that security controls are implemented and compliant with DoD and FedRAMP standards
• Ensure effective operation of system safeguards and controls through a proactive, risk-based monitoring approach
• Maintain continuous visibility into CSP applications and devices to support data-driven decision-making and adherence to authorized risk thresholds
• Support risk-based situational awareness for network security by conducting architectural reviews that expedite mitigation efforts
• Integrate security and risk management processes to identify actionable items driven by threat and vulnerability assessments
• Validate that CSPs regularly perform vulnerability scans as mandated by DoD and FedRAMP security control requirements
• Recommend and oversee the submission and review of POA&Ms, vulnerability scans, Playbooks, Change Requests, Deviation Reports, and Monthly One Pagers
• Contribute to a leverage model that reduces government costs, time, and resources associated with ConMon for cloud systems
• Conduct Annual Assessments in accordance with FedRAMP and DoD requirements
• Provide comprehensive ConMon compliance assessments and risk analyses for each assigned CSO including input for annual reviews, extension and change requests, Binding Operational Directives (BODs), and Emergency Directives (EDs) supported by documentation, recommendations, reports, and briefings
• Upload all documentation or changes in control status related to ConMon activities into eMASS or a government-designated Governance, Risk, and Compliance (GRC) system
• Document ConMon standards and frameworks
• Utilize government-specified cybersecurity tools to support cyber compliance monitoring and maintenance

Requirements

• Bachelor's degree (IT-related field preferred)
• Eight (8) years of overall experience in cybersecurity or network security position; with at least 5 years in cloud security assessment or continuous monitoring roles
• Have an active DoD Top Secret clearance with SCI eligibility
• DoD 8570 IAM/IA Technical (IAT) Level III certification
• Strong knowledge and hands‑on experience with FedRAMP, NIST SP 800-53, DoD RMF, and related cybersecurity frameworks
• Proven experience working with Cloud Service Providers (CSPs) in a government or regulated environment
• Expertise in evaluating security control implementations, conducting Annual Assessments, reviewing POA&Ms, deviation requests, and other artifacts related to risk posture
• Familiarity with security controls for Azure, AWS, and assorted cloud platforms
• Demonstrated experience using eMASS, and familiarity with other GRC tools used by DoD or federal agencies
• Solid understanding of vulnerability scanning tools, SIEM platforms, and security monitoring tools
• Strong analytical skills with the ability to interpret technical data and identify risks and mitigation strategies
• Excellent verbal and written communication skills to produce technical reports, risk summaries, and briefings for stakeholders including Authorizing Officials (AOs)
• Experience developing or maintaining Continuous Monitoring (ConMon) plans, reports, and dashboards
• Ability to work independently and collaboratively in a fast‑paced, mission‑critical environment

Compensation: $115,000 - $130,000

At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.

Benefits

• 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
• Performance Bonuses: Performance bonuses are awarded based on individual contributions and company‑wide results, aligning recognition with impact.
• 401(k) with Match: We match 3% of your contributions with immediate vesting.
• Financial Protection: Company‑paid life insurance up to $300K and options for additional coverage for you and your dependents.
• Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
• Parental Leave: 15 days of fully paid leave for new parents, because family matters.
• Military Differential Pay: We bridge the gap for employees on active duty, so they don’t take a financial hit while serving.
• Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
• Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long‑term value they help create.

At AGE, you’ll do work that matters, supported by a company that delivers for its people.