Overview
Owns and manages you will own and manage the development of InfoSec engineering designs and implementation. Identifies security issues and risks, and develop mitigation plans for cloud implementations. Architect, design, implement, support, and evaluate security-focused tools and services. Oversee assessment and mitigation of system security threats/risks throughout the program life cycle; validation of system security requirements definition and analysis; establishing system security designs; implementing security designs in hardware, software, data, and procedures; verification of security requirements; performing system certification and accreditation planning and testing and liaison activities, and supporting secure systems operations and maintenance. Liaisons with various internal and external groups for security mapping and overall solution integration activities.
In this role, you will support the implementation and maintenance of secure cloud environments while working closely with engineering, development, and program teams. You will contribute to strengthening the overall security posture of cloud-based systems by supporting security engineering activities, implementing security controls, and ensuring compliance with applicable federal and DoD cybersecurity standards.
The proposed salary range for this position is $77,581-$94,500. There are a host of factors that can influence final salary including, but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications. Our employees value the flexibility EXPANSIA allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our unique mix of benefits options is designed to support and protect employees and their families. Employment benefits include health and wellness programs, income protection, paid leave and retirement and savings.
RESPONSIBILITIES
- Apply the Risk Management Framework (RMF) to support system authorization activities, including security control selection, implementation, assessment, and continuous monitoring in accordance with DoD standards
- Develop and maintain RMF artifacts (e.g., SSPs, POA&Ms, SARs) and coordinate with stakeholders to ensure systems meet security compliance requirements for Authority to Operate (ATO)
- Support the design, implementation, and maintenance of secure cloud architectures in accordance with program and security requirements
- Assist in the development, integration, and testing of security controls across cloud infrastructure, applications, and data environments
- Conduct risk and vulnerability assessments and assist with developing mitigation strategies
- Implement and maintain security configurations to ensure the confidentiality, integrity, and availability of systems
- Support development and maintenance of security documentation including System Security Plans (SSPs), security control assessments, and contingency plans
- Assist with system security engineering activities throughout the system lifecycle including requirements analysis, design validation, and security testing
- Perform security scans and vulnerability assessments using approved tools and document findings and remediation recommendations
- Support security compliance activities in accordance with federal and DoD cybersecurity frameworks
- Participate in incident response activities and assist in investigation and remediation of security events
- Collaborate with cloud engineers, system administrators, and program stakeholders to ensure security requirements are implemented effectively
- Monitor systems and environments for potential security risks and assist in remediation efforts
- Support certification and authorization activities and processes
- Provide technical support to operational strategies aligned with program initiatives to optimize processes, enhance productivity, and ensure quality across program functions
- Ensure 100% of planned hours are worked and recorded
- Identify and forward to leadership any opportunities that could lead to growth within your work area
- Participate in growth efforts as requested
- Ensure all contractual deliverables are met or exceeded to the customer's satisfaction
- Complete personal PDP and attend Staff Meeting and Storytime (with camera on)
- Build productive and positive professional relationships with clients within the program
- Execute all contract requirements as assigned in accordance with the contract-specific LCAT and requirements
- Maintain active status of all required DoD 8570/8140 industry certifications in good standing through required Continuing Education (CE) units
- Perform other related duties as assigned
KEY QUALIFICATIONS
Clearance: Active Secret Clearance
Education and Years of Experience: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field with at least 4 years of relevant experience.
- Knowledge of cybersecurity principles, frameworks, and best practices
- Experience with risk assessment methodologies and security compliance standards
- Familiarity with security testing tools such as vulnerability scanners and SIEM solutions
- Basic understanding of network protocols, firewalls, and system security configurations
- Ability to analyze security policies and develop recommendations for improvement
- DoD 8570 / 8140 IAT Level II certification
- At least one cloud certification
PREFERRED ADDITIONAL QUALIFICATIONS
- Experience with NIST, FISMA, or DoD security frameworks
- Familiarity with cloud security best practices and secure software development
- Hands-on experience with security incident response and threat detection tools
- Strong analytical and problem-solving skills with attention to detail
- Experience with Agile development methodologies
