Description
We are seeking a Senior Cybersecurity Engineer to join our collaborative team to develop, manage, and maintain the security posture of cloud-based information systems. The successful candidate will support our team and customers through advanced technical evaluations, detection engineering, and cloud architecture security, ensuring high standards of security and compliance.
Responsibilities:
- Conduct technical evaluations of information systems design, containerized applications, and cloud architecture, ensuring security and operational requirements map directly into the System/Enterprise Architecture.
- Validate the efficacy of log ingestion across IaaS, OS, and application layers (including AWS CloudTrail, VPC Flow Logs, and GuardDuty alerts).
- Develop, test, and deploy custom detection engineering rulesets within the SIEM.
- Utilize automated cloud security posture assessment tools to continuously monitor the AWS environment for configuration drift, ensuring strict adherence to the provided Security Requirements Guide.
- Leverage AI-assisted RMF tools to ingest infrastructure-as-code (e.g., Terraform) and system documentation to rapidly identify compliance gaps, accelerating the cATO process.
- Support continuous exposure management and cATO workflows to maintain real-time system authorization.
- Coordinate proper security control implementation and detection tuning with system administrators and cloud engineers.
Required Qualifications:
- Bachelor’s Degree in Computer Science, Cybersecurity, or a related field.
- 10+ years of relevant Cybersecurity experience focusing on SIEM validation, tuning, behavioral analytics (integrated with AWS infrastructure), continuous exposure management, and cATO support.
- High level of hands-on knowledge and experience with AWS and Splunk.
- Active IAT Level 2 certification (e.g., Security+ CE, SSCP, CCNA Security), with a strong preference for higher-level certifications.
- Demonstrated experience conducting technical evaluations of information systems design, containerized applications, and cloud architecture.
- Experience utilizing automated tools to monitor cloud environments for configuration drift against Security Requirements Guides.
- Ability to use prior experience and knowledge to address new situations, especially during interactions with clients.
- Ability to communicate on technical subjects using clear, concise, non-technical language to include strong written communications, ability to provide written feedback on documents, and ability to prepare briefings.
- US Citizenship and an active Top Secret security clearance.
Desired Qualifications:
- IAT Level 3 or higher certifications (e.g., CISSP, CASP+, CISM, GSLC).
- Advanced technical certifications relevant to the environment (e.g., AWS Certified Security – Specialty, Splunk Enterprise Security Certified Admin).
- Hands-on experience using AI-assisted RMF tools to ingest Infrastructure-as-Code (e.g., Terraform) for automated compliance mapping.
- Deep understanding of container security (e.g., Kubernetes, Docker) and securing DevSecOps pipelines.
- Demonstrated experience giving technical guidance to cloud engineers and system administrators.