# Senior AWS Cyber Engineer

**Company**: Leidos
**Location**: Bedford, MA
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $107,900.00 - $195,050.00
**Category**: Security
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Bedford-MA/Senior-AWS-Cyber-Engineer_R-00193908?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_59e76fc7-508

## Description

We are seeking a Senior AWS Cyber Engineer to support Amazon Web Services (AWS) cloud environments. As a Senior AWS Cyber Engineer, you will design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for AWS SIPRNet environments.

**Primary Responsibilities:**

- Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for AWS SIPRNet environments.

- Serve as Subject Matter Expert (SME) for all IT stakeholders involved with system design, system builds, and Authority to Operate (ATO) efforts on cybersecurity requirements and tooling.

- Operate, configure and maintain various compliance tools/services including ACAS/Nessus scanners; AWS Inspector; AWS Security Hub to detect misconfigurations and threats; and other Cloud Native Services.

- Monitor and query various logging and event monitoring tools/services including CloudTrail; AWS Config; GuardDuty; and other Cloud Native Services.

- Document technical mitigation details, compile raw scan exports, generate vulnerability reports, create and maintain system Plan of Action and Milestones (POA&M).

- Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.

- Ensure compliance with SCCA, Cloud Computing SRG, and other STIG/SRG requirements.

- Create RMF-required authorization-related documentation and artifacts and support ATO sustainment activities.

- Verify patch compliance using the approved technical solutions and conduct remediation activities.

- Provide and execute a plan for enterprise vulnerability and compliance scanning.

- Implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.

- Participate in regular briefings with the customer on cybersecurity status, including preparing briefing materials.

- Prepare detailed technical documentation to support development and operational processes.

- Collaborate with team members and provide mentorship to junior staff, fostering a learning environment.

**Requirements:**

- Bachelor's degree and 8+ years of prior relevant experience or Master's with 6+ years of prior relevant experience or equivalent experience.

- 6+ years of experience with cloud hosted systems and/or applications.

- U.S. citizenship is required due to contract requirements.

- Must possess an active DoD Secret security clearance.

- Certifications: DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CySA+, or equivalent).

- AWS Certified Security – Specialty.

- ACAS Certified – Supervisor/Operator.

- Hands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and implementing and remediating DISA Security Technical Implementation Guides (STIGs).

**Preferred Qualifications:**

- Experience with USAF Cloud One or Platform 1.

- Experience with automation/tools like EvalSTIG, STIG Manager, Ansible etc.

- Experience with Zero Trust Architecture.

- Linux (RHEL) and/or Microsoft Windows Server administration certifications.

- Certifications: CISSP or equivalent (IAT-3).

**Pay Range:** $107,900.00 - $195,050.00

## Skills

### Required
- AWS
- Cloud Security
- Cybersecurity
- ACAS
- Nessus
- AWS Inspector
- AWS Security Hub
- CloudTrail
- AWS Config
- GuardDuty
- RMF
- SCCA
- Cloud Computing SRG
- STIG/SRG
- DoD 8570/8140
- AWS Certified Security – Specialty
- ACAS Certified – Supervisor/Operator
- AWS CLI
- Ansible Playbooks
- Tenable Nessus
- DISA Security Technical Implementation Guides (STIGs)

### Nice to have
- USAF Cloud One
- Platform 1
- EvalSTIG
- STIG Manager
- Zero Trust Architecture
- Linux (RHEL)
- Microsoft Windows Server
- CISSP

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Bedford-MA/Senior-AWS-Cyber-Engineer_R-00193908?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)