Senior Cybersecurity Engineer

$160,001 - $160,001/Yr

SAIC

Full-time - Mid Level

Remote

Professional, Scientific, and Technical Services

About the position

SAIC is currently seeking a Senior Cybersecurity Engineer to join our team supporting the Centers for Medicare and Medicaid Services (CMS) within the Department of Health and Human Services. This position is critical as it involves working within a fast-paced SecOps development team that is responsible for creating automated security products and services. These solutions are designed to be utilized by application development teams across the CMS enterprise, ensuring that security is integrated into the development lifecycle. As a Senior Cybersecurity Engineer, you will be expected to lead complex security projects from the design phase through to implementation and maintenance. Your primary focus will be on identifying and mitigating security vulnerabilities within a cloud-based environment. You will deliver security solutions using site reliability engineering (SRE) concepts, which will require a self-motivated approach to resolving complex questions and issues that arise. Creativity and innovation will be key as you automate and streamline processes and procedures to enhance security measures. Collaboration is essential in this role, as you will work proactively within a team setting, valuing attention to detail and customer outcomes. You will also be responsible for addressing and resolving complex incidents and requests that may be escalated through customer support channels. Building strong relationships with delivery and customer teams is crucial, as you will need to work across organizational boundaries to effectively resolve customer requests. Additionally, you will review organizational-wide policies, particularly those related to AWS IAM roles and policies, to ensure compliance and security best practices.

Responsibilities

• Lead complex security projects from design through implementation and maintenance to identify and mitigate security vulnerabilities within a cloud-based environment.
• Deliver security solutions using site reliability engineering (SRE) concepts.
• Self-motivate to lead or support the resolution of complex questions and issues.
• Utilize creativity and innovation to automate and streamline processes and procedures.
• Collaborate proactively in a team setting to achieve security objectives.
• Value attention to detail and customer outcomes in all tasks.
• Learn new skills, client environments, tools, and domain expertise quickly and eagerly.
• Address and resolve complex incidents/requests escalated via customer support requests.
• Build strong relationships with delivery and customer teams by working across organizational boundaries to resolve customer requests.
• Review organizational-wide policies specific to AWS IAM roles and policies.

Requirements

• Bachelor's degree in a technical field; 4+ years of experience can be substituted in lieu of a bachelor's degree, pending review and customer approval.
• Minimum of 14+ years of professional experience, with at least 5 years in Cybersecurity.
• Hands-on experience with AWS GuardDuty, AWS Security Hub, Trend-micro, and Tenable/Nessus to deliver security solutions.
• Complex Python scripting and automation experience.
• 5+ years' experience working in an Agile/Scrum environment.
• 5+ years' experience delivering DevSecOps in cloud-based environments (AWS preferred and/or Azure/MAG).
• 5+ years' experience performing software configuration management functions.
• Experience in a service and product-centered environment such as SaaS/PaaS/IaaS.
• Knowledge of AWS Service Control Policies is preferred.
• Current or prior work experience at the Centers for Medicare and Medicaid Services (CMS) in the Office of Information Technology / Infrastructure and User Services Group (OIT / IUSG) is highly preferred.

Nice-to-haves

• Experience with security compliance frameworks and standards (e.g., NIST, ISO 27001).
• Familiarity with container security and orchestration tools (e.g., Docker, Kubernetes).
• Certifications such as CISSP, CISM, or AWS Certified Security Specialty.