Original listing text, shown exactly as published by the company.
Location: Hybrid Remote-Preferred Hanscom AFB, MA
Owns and manages the development of InfoSec engineering designs and implementation. Identifies security issues and risks and develops mitigation plans in accordance with standards for cloud implementations. Architect, design, implement, support, and evaluate security-focused tools and services. Oversee assessment and mitigation of system security threats/risks throughout the program life cycle; validation of system security requirements definition and analysis; establishing system security designs. Implements security designs—including hardware, software, data, and procedures—and verifies compliance with security requirements.
In this role, you will support the implementation and maintenance of secure cloud environments while working closely with engineering, development, and program teams. You will contribute to strengthening the overall security posture of cloud-based systems by supporting security engineering activities, implementing security controls, and ensuring compliance with applicable federal and DoD cybersecurity standards.
The proposed salary range for this position is $74,500-$87,395. There are a host of factors that can influence final salary including, but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications. Our employees value the flexibility EXPANSIA allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our unique mix of benefits options is designed to support and protect employees and their families. Employment benefits include health and wellness programs, income protection, paid leave and retirement and savings.
RESPONSIBILITIES
- Support the design, implementation, and maintenance of secure cloud architectures in accordance with program and security requirements
- Assist in the development, integration, and testing of security controls across cloud infrastructure, applications, and data environments
- Conduct risk and vulnerability assessments and assist with developing mitigation strategies
- Implement and maintain security configurations to ensure the confidentiality, integrity, and availability of systems
- Support development and maintenance of security documentation including System Security Plans (SSPs), security control assessments, and contingency plans
- Assist with system security engineering activities throughout the system lifecycle including requirements analysis, design validation, and security testing
- Perform security scans and vulnerability assessments using approved tools and document findings and remediation recommendations
- Support security compliance activities in accordance with federal and DoD cybersecurity frameworks
- Participate in incident response activities and assist in investigation and remediation of security events
- Collaborate with cloud engineers, system administrators, and program stakeholders to ensure security requirements are implemented effectively
- Monitor systems and environments for potential security risks and assist in remediation efforts
- Support certification and authorization activities and processes
- Provide technical support to operational strategies aligned with program initiatives to optimize processes, enhance productivity, and ensure quality across program functions
- Ensure 100% of planned hours are worked and recorded
- Identify and forward to leadership any opportunities that could lead to growth within your work area
- Participate in growth efforts as requested
- Ensure all contractual deliverables are met or exceeded to the customer's satisfaction
- Complete personal PDP and attend Staff Meeting and Storytime (with camera on)
- Build productive and positive professional relationships with clients within the program
- Execute all contract requirements as assigned in accordance with the contract-specific LCAT and requirements
- Maintain active status of all required DoD 8570/8140 industry certifications in good standing through required Continuing Education (CE) units
- Perform other related duties as assigned
KEY QUALIFICATIONS
Clearance: Active Secret Clearance
Education and Years of Experience: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field with at least 4 years of relevant experience.
- Knowledge of cybersecurity principles, frameworks, and best practices
- Experience with risk assessment methodologies and security compliance standards
- Familiarity with security testing tools such as vulnerability scanners and SIEM solutions
- Basic understanding of network protocols, firewalls, and system security configurations
- Ability to analyze security policies and develop recommendations for improvement
- Experience with AWS cloud services and environments
- Proficiency with AWS security tools, including Identity and Access Management (IAM), Key Management Service (KMS), GuardDuty, Inspector, Macie, Security Hub, CloudTrail, and CloudWatch
DoD 8570 / 8140 IAT Level II certification
- At least one cloud certification
PREFERRED ADDITIONAL QUALIFICATIONS
- Experience with NIST, FISMA, or DoD security frameworks
- Familiarity with cloud security best practices and secure software development
- Hands-on experience with security incident response and threat detection tools…
