Cloud Security Engineer (AWS)

Computer World Services Corp. (Cws) - Atlanta, GA

Full-time

Atlanta, GA

Professional, Scientific, and Technical Services

About the position

The Cloud Security Engineer is responsible for planning, coordinating, implementing, and overseeing the organization's cloud network and infrastructure. This role involves assessing and analyzing security risks, facilitating agencies in identifying their security infrastructure, and designing and implementing security solutions to minimize risks associated with IT systems. The engineer will also oversee security staff efforts and ensure compliance with industry standards while optimizing cloud performance.

Responsibilities

• Implement security measures and ensure compliance with industry standards.
• Monitor and optimize cloud performance, including incident recovery processes.
• Utilize tools such as Splunk for Security Information and Event Management (SIEM) monitoring, analysis, logging, and reporting.
• Review, analyze, and report AWS GuardDuty alerts.
• Ensure secure development processes are implemented and maintained.
• Collaborate with development teams to integrate applications with cloud services.
• Identify and define computer system security requirements in coordination with DevOps teams.
• Define and implement computer security architecture and detailed cybersecurity strategies.
• Develop technical solutions and utilize security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Conduct and support investigations related to security incidents involving technology (i.e., email, endpoint, applications, and data breaches).
• Consult on IT security and compliance initiatives to ensure Dev Sec Ops practices are well-defined and predictably executed.
• Support risk mitigation activities such as Assessment and Authorization (A&A), continuous monitoring, and vulnerability and configuration management.
• Integrate with and support a team of subject matter experts in a highly agile environment to implement best-in-class cloud solutions by leveraging a variety of automation, instance and/or container, orchestration, security, and native/non-native cloud services.
• Work with the cloud team to architect, design, implement, and maintain cloud solutions and new capabilities in AWS.
• Develop deliverables associated with FISMA security package including but not limited to: System Security Plan, Contingency Plan, Incident Response Plan, and Continuous Monitoring Plan.
• Work to complete ATO packages compliant with NIST SP 800-37 and SP 800-53 guidelines.
• Adhere to NIST Risk Management Framework to support analyzing development of supporting policies, procedures, and plans and for the implementation of security controls and analyzing corrective action plans.
• Work with the System Owners, ISSOs, and other stakeholders to complete assessment reports.
• Analyze IT security events to distinguish events that qualify as security incidents as opposed to non-incidents.
• Maintain working knowledge of network communications, routing protocols, and common internet applications/standards.

Requirements

• Bachelor's Degree or higher and 10 years of related experience.
• Expert knowledge of AWS services including Management Console, GuardDuty, EC2, VPC, CloudTrail, Secrets Manager, Systems Manager, etc.
• Ability to perform Tenable Nessus SC scans, parse/analyze/report results for vulnerability remediation.
• Familiarity with Continuous Diagnostics and Mitigation (CDM) Dashboard.
• Experience in developing System Security Plan, Contingency Plan, Incident Response Plan, and Continuous Monitoring Plan.
• Ability to support Certification and Accreditation (C&A), continuous diagnostics, and mitigation initiatives.

Nice-to-haves

• Experience with native CI/CD tools such as CodeCommit, CodeDeploy, CodePipeline, etc.
• Scripting skills (Python, Ruby, Perl, Bash, Powershell, etc.).
• Strong knowledge and experience with virtual desktop interfaces.
• Proficiency with Cloud networking and troubleshooting Cloud networking environments (IP networking, VPNs, DNS, load balancing, firewalls, NAT, SSL/TLS, etc.).
• Experience with SIEM tools (e.g., ArcSight, Splunk, etc.).
• Familiarity with Cyber Security Assessment & Management (CSAM) and Information Assurance Compliance System (IACS).
• Relevant commercial certifications desired (Security+, CISSP).

Benefits

• Equal employment opportunity employer
• Reasonable accommodations for individuals with disabilities