Cloud Security Engineer – Mid at DAn Solutions in Reston, VA, USA

Job description

• DAn Solutions is seeking a Mid-Level Cloud Security Engineer to support the security engineering, assessment, documentation, and accreditation of mission-critical IT and cloud environments.
• The Cloud Security Engineer will evaluate security requirements and risk, develop and implement cloud security architectures and controls, and support Information Assurance and compliance activities across on-premises, cloud, and hybrid environments.

Responsibilities

• Support security documentation, validation, assessment, and accreditation activities for IT systems.
• Evaluate systems against organizational Information Assurance (IA) and security requirements.
• Assist in defining desired security states and organizational risk thresholds.
• Analyze current environments to identify compliance gaps and security risks.
• Support development of security doctrine, policies, procedures, and technical guidance.
• Evaluate applications, software, and specialized utilities for adherence to software assurance best practices.
• Research and recommend security tools and capabilities appropriate for on-premises, cloud, and hybrid environments.
• Design and implement cloud security architectures, tools, controls, and processes.
• System Security Plans
• Contingency Plans
• Security Procedures
• Continuity of Operations Plans
• Conduct security architecture evaluations and provide technical guidance and troubleshooting.
• Support Risk Management Framework (RMF) activities.
• Work within Agile development and engineering environments.
• Collaborate with Government/IC customers and technical teams to ensure security standards and requirements are met.

Requirements

• 5+ years of hands-on experience building and administering cloud environments.
• Experience using cloud-native functionality as well as COTS, GOTS, and open-source technologies.
• Knowledge of Infrastructure as Code technologies and concepts, including Terraform, CloudFormation, or Bicep.
• Experience developing and evaluating security documentation.
• Experience performing security architecture evaluations, developing technical guidance, and troubleshooting.
• Experience with Risk Management Framework (RMF).
• Experience working within an Agile development environment.
• High School Diploma/GED + 7 years supporting IT projects and activities
• Associate's Degree + 5 years
• Bachelor's Degree + 3 years
• Master's Degree + 1 year
• Ability to obtain an approved DoD 8570 CSSP-IS certification within 30 days of offer acceptance, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Ability to obtain an approved IAT Level III certification within 45 days of the CSSP-IS date, or within 45 days of offer acceptance if CSSP-IS is already held. Qualifying certifications include SecurityX, CCNP Security, CISA, CISSP/Associate, GCED, GCIH, or CCSP
• Experience with the Software Development Life Cycle (SDLC).
• Strong team leadership and client-relationship skills.
• Strong interpersonal skills.
• Excellent written and verbal communication skills.

Skills

Required

• Cloud-native functionality
• COTS, GOTS, and open-source technologies
• Security architecture evaluation
• Technical guidance and troubleshooting
• Risk Management Framework (RMF)
• Agile development environment

Preferred

• Software Development Life Cycle (SDLC)
• Team leadership
• Client-relationship skills
• Interpersonal skills
• Written and verbal communication

Benefits

• Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications