Cyber Security Engineer
Summary
Designs, assesses, and secures cloud infrastructure (AWS/Azure/GCP/Oracle) for government systems, conducts security assessments, and manages compliance with NIST RMF and POA&Ms.
Cyber Security Engineer
Location: Herndon, VA
BT-370 – Cyber Security Engineer
Herndon, VA (fully on-site, no remote option)
**Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**
Required:
- Demonstrates experience conducting security assessments, particularly for cloud infrastructure and cloud services.
- Demonstrates experience facilitating TEMs with cloud service providers to review cloud service architectures
- Demonstrates experience designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, or Microsoft Azure cloud architecture.
- Demonstrates experience utilizing or reviewing cross domain technology and common architecture designs.
- Demonstrates experience with continuous monitoring requirements to include scan analysis for critical or high findings with common scan tools such as Rapid 7, Nessus, and Qualys.
- Demonstrates experience monitoring or closing Plan of Action and Milestone items (POA&Ms).
- Demonstrates experience utilizing compliance tools to track assessment and authorization activities such as Xacta 360, Risk Vision, RSA Archer.
- Demonstrates experience with the common control provider concept within the NIST Risk Management Framework.
- Demonstrates experience with security control assessments to include working with SCAs and preparing security packages for SCAs.
- Demonstrates experience conducting information system security engineering activities.
- Demonstrates project management experience including project planning, task tracking, milestone management, and resource coordination
- Demonstrates experience developing and maintaining program metrics, performance indicators, and compliance status dashboards
- Demonstrates experience preparing technical reports, program highlights, status briefings, and leadership communications
Desired:
- Skills and Demonstrates knowledge that are highly desired but not required to perform the work include:
- Demonstrates experience using the Sponsor’s or IC element A&A process.
- Demonstrates experience creating or reviewing A&A body of evidence documentation in a cloud security environment.
- Demonstrates experience identifying, implementing, or reviewing appropriate information security controls.
- Demonstrates experience working in Xacta 360