Cloud Cyber Security Engineer

Dunhill Professional Search - Fairfax, VA

Full-time

Remote - Fairfax, VA

Administrative and Support Services

About the position

The Cloud Cyber Security Engineer will play a crucial role in supporting the review of the Department of Veterans Affairs (VA) Enterprise Cloud (VAEC) systems toolset configurations. This position is fully remote and requires U.S. citizenship. The primary responsibility of the engineer will be to ensure that the configurations meet established security standards and comply with VA policies. The ideal candidate will possess a robust background in cybersecurity engineering, particularly within cloud environments, and will have hands-on experience with security toolset configuration reviews. In this role, the engineer will conduct thorough reviews of VAEC cloud systems toolset configurations, documenting the outcomes of these reviews and providing detailed reports. The engineer will also review and document configurations related to tenant and network separation, ensuring proper access control within and between cloud environments and the VA Wide Area Network (WAN). Additionally, the engineer will perform reviews of cloud privileged accounts to ensure that systems and cloud administration accounts maintain proper access control. The role will also involve conducting cloud logging reviews to ensure compliance with requirements defined in M-21-31, as well as developing and maintaining VA cloud logging baselines to enhance monitoring and security capabilities. Collaboration with stakeholders will be essential to ensure that toolset configurations align with organizational cybersecurity goals and requirements. Staying current with the latest cloud security trends, tools, and best practices will be vital to ensure the effectiveness of configuration reviews.

Responsibilities

• Conduct thorough reviews of VAEC cloud systems toolset configurations to ensure compliance with security standards and VA policies.
• Document outcomes of configuration reviews and provide detailed reports.
• Review and document configurations related to tenant and network separation (with access control) within and between cloud environments and the VA WAN.
• Perform cloud privileged account reviews for systems accounts and cloud administration accounts to ensure proper access control.
• Conduct cloud logging reviews to ensure compliance with requirements defined in M-21-31.
• Develop and maintain VA cloud logging baselines to enhance monitoring and security capabilities.
• Collaborate with stakeholders to ensure alignment of toolset configurations with organizational cybersecurity goals and requirements.
• Stay current with the latest cloud security trends, tools, and best practices to ensure the effectiveness of configuration reviews.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• 3+ years of experience in cybersecurity engineering, particularly in cloud (AWS, Azure, Microsoft 365, etc.) environments.
• Proven experience in reviewing and documenting security toolset configurations.
• Strong understanding of cybersecurity principles, particularly in cloud environments.
• Proficiency in using cybersecurity tools and technologies.
• Certification in cybersecurity (e.g., CISSP, CISM, AWS Security, Azure Security) is a plus.
• Excellent organizational skills and attention to detail, with the ability to manage multiple tasks simultaneously.
• Exceptional written and verbal communication skills.
• Exceptional analytical and conceptual thinking skills.
• Strong people skills and ability to work collaboratively with a team of peers.

Nice-to-haves

• Certification in cybersecurity (e.g., CISSP, CISM, AWS Security, Azure Security) is a plus.