Description
We are seeking a Cloud Cyber Security Engineer to play a critical role in the accreditation of a state-of-the-art technology stack under the DOMEX Technology Platform (DTP). As a Cloud Cyber Security Engineer, you will provide technical security expertise in securing, hardening, and maintaining compliance of cloud-based software platforms and infrastructure across multiple secure networks.
Key Responsibilities:
- Validate and verify system security requirements and establish system security designs for large-scale systems
- Recommend and develop technical solutions, products, and standards based on current and desired system security architecture
- Collaborate with compliance personnel, software engineers, system engineers, system architects, and Government counterparts to perform systems and cyber security engineering tasks
- Participate in Program Increment Planning and related agile team activities
- Work closely with System Engineering, Test Engineering, and Integration teams to ensure that the hardware and software architecture and implementation meet security requirements
- Evaluate the impact of new development on the operational security posture of the system
- Serve as a subject matter expert in security architecture
- Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models
- Design security architectures and solutions spanning AWS, Azure, GCP, and OCI
- Architect integrations between native security services and enterprise security platforms
- Knowledge of Kubernetes and container security architectures
- Design, engineer, and implement enterprise network security architecture
- Evaluate the current network security architecture, identify gaps and improvement opportunities, and develop practical engineering plans
- Provide specifications for network security architecture, evaluate and recommend emerging security technologies, and perform needs assessments
- Tune and optimize security controls to reduce false positives, close coverage gaps, and improve detection and enforcement
Requirements:
- Active or current Top Secret/SCI and the ability to obtain Polygraph
- Bachelor of Science degree from an accredited university in Computer Science, Information Assurance, Information Security System Engineering or related field with a minimum of 12 years of experience as an Information Systems Security Engineer (ISSE) or System Engineer
- At least one IAT and one IAT Level II or higher certification
- Solid understanding of security practices and policies and hands-on vulnerability testing experience
- Experience applying Risk Management Framework
- Demonstrated knowledge of and experience with common security tools
- Extensive experience designing enterprise security solutions and translating security requirements into implementable technical architectures
- Knowledge of Kubernetes and container security architectures
- Experience designing solutions involving SIEM, vulnerability management, identity security, network security, secrets management, container scanning, and data protection technologies
Nice to Have:
- Active TS/SCI with polygraph
- Experience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS
- Five (5) years of experience with Defense in Depth Principals/technology
- DoD 8570 compliance with IASAE Level 2 or 3
- Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools
- Extensive experience hardening modern operating systems
- Information Systems Security Engineering Professional (ISSEP) Certification
- Computer Information Systems Security Professional (CISSP) Certification