Cloud Cyber Security Engineer

Dunhill Professional Search - Fairfax, VA

Full-time

Remote - Fairfax, VA

Administrative and Support Services

About the position

The Cloud Cyber Security Engineer will play a crucial role in supporting the review of the Department of Veterans Affairs (VA) Enterprise Cloud (VAEC) systems toolset configurations to ensure compliance with security standards and VA policies. This position is fully remote and requires U.S. citizenship. The ideal candidate will possess a robust background in cybersecurity engineering, particularly within cloud environments, and will have experience in conducting security toolset configuration reviews. In this role, a typical day will involve conducting thorough reviews of VAEC cloud systems toolset configurations to ensure they meet established security standards and VA policies. The engineer will document the outcomes of these configuration reviews and provide detailed reports to stakeholders. Additionally, the role includes reviewing and documenting configurations related to tenant and network separation, ensuring proper access control within and between cloud environments and the VA Wide Area Network (WAN). The engineer will also perform cloud privileged account reviews for systems accounts and cloud administration accounts to ensure that access control measures are properly implemented. Conducting cloud logging reviews to ensure compliance with requirements defined in M-21-31 is another critical responsibility. The engineer will develop and maintain VA cloud logging baselines to enhance monitoring and security capabilities. Collaboration with stakeholders is essential to ensure that toolset configurations align with organizational cybersecurity goals and requirements. Staying current with the latest cloud security trends, tools, and best practices is vital to ensure the effectiveness of configuration reviews.

Responsibilities

• Conduct thorough reviews of VAEC cloud systems toolset configurations to ensure compliance with security standards and VA policies.
• Document outcomes of configuration reviews and provide detailed reports.
• Review and document configurations related to tenant and network separation (with access control) within and between cloud environments and the VA WAN.
• Perform cloud privileged account reviews for systems accounts and cloud administration accounts to ensure proper access control.
• Conduct cloud logging reviews to ensure compliance with requirements defined in M-21-31.
• Develop and maintain VA cloud logging baselines to enhance monitoring and security capabilities.
• Collaborate with stakeholders to ensure alignment of toolset configurations with organizational cybersecurity goals and requirements.
• Stay current with the latest cloud security trends, tools, and best practices to ensure the effectiveness of configuration reviews.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• 3+ years of experience in cybersecurity engineering, particularly in cloud (AWS, Azure, Microsoft 365, etc.) environments.
• Proven experience in reviewing and documenting security toolset configurations.
• Strong understanding of cybersecurity principles, particularly in cloud environments.
• Proficiency in using cybersecurity tools and technologies.
• Certification in cybersecurity (e.g., CISSP, CISM, AWS Security, Azure Security) is a plus.
• Excellent organizational skills and attention to detail, with the ability to manage multiple tasks simultaneously.
• Exceptional written and verbal communication skills.
• Exceptional analytical and conceptual thinking skills.
• Strong people skills and ability to work collaboratively with a team of peers.

Nice-to-haves

• Certification in cybersecurity (e.g., CISSP, CISM, AWS Security, Azure Security) is a plus.