Cyber Security Engineer

Cyber Security Engineer

BT-370 – Cyber Security Engineer Skill Level- Expert/Subject Matter Expert Herndon, VA (fully on-site, no remote option)

Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.

Required:

• Demonstrates experience conducting security assessments, particularly for cloud infrastructure and cloud services.
• Demonstrates experience facilitating TEMs with cloud service providers to review cloud service architectures
• Demonstrates experience designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, or Microsoft Azure cloud architecture.
• Demonstrates experience utilizing or reviewing cross domain technology and common architecture designs.
• Demonstrates experience with continuous monitoring requirements to include scan analysis for critical or high findings with common scan tools such as Rapid 7, Nessus, and Qualys.
• Demonstrates experience monitoring or closing Plan of Action and Milestone items (POA&Ms).
• Demonstrates experience utilizing compliance tools to track assessment and authorization activities such as Xacta 360, Risk Vision, RSA Archer.
• Demonstrates experience with the common control provider concept within the NIST Risk Management Framework.
• Demonstrates experience with security control assessments to include working with SCAs and preparing security packages for SCAs.
• Demonstrates experience conducting information system security engineering activities.
• Demonstrates project management experience including project planning, task tracking, milestone management, and resource coordination
• Demonstrates experience developing and maintaining program metrics, performance indicators, and compliance status dashboards
• Demonstrates experience preparing technical reports, program highlights, status briefings, and leadership communications

Desired:

• Skills and Demonstrates knowledge that are highly desired but not required to perform the work include:
• Demonstrates experience using the Sponsor's or IC element A&A process.
• Demonstrates experience creating or reviewing A&A body of evidence documentation in a cloud security environment.
• Demonstrates experience identifying, implementing, or reviewing appropriate information security controls.
• Demonstrates experience working in Xacta 360
• Demonstrates experience with Sponsor's A&A tools.
• Demonstrates experience assessing cloud infrastructure and cloud services for security gaps and weaknesses according to industry standards.
• Demonstrates experience reviewing cloud service provider body of evidence packages for completeness and accuracy.
• Demonstrates experience facilitating technical exchange meetings (TEMs) with cloud service providers to review cloud service architectures.
• Demonstrates experience providing project management support including project planning, task tracking, milestone management, and resource coordination to ensure timely delivery of all contract requirements.