Назад
Company hidden
3 дня назад

Cyber Security Engineer (AWS)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cyber Security Engineer (AWS): Maintaining RMF authorization packages, security controls, POA&Ms, and continuous monitoring for an Army AWS system with an accent on NIST 800-53, DoD STIGs, vulnerability management, and DevSecOps integration. Focus on validating compliance evidence, assessing cloud architecture impacts, resolving security findings, and tracking remediation through eMASS and operational security workflows.

Location: Baltimore, Maryland, United States; onsite

Company

hirify.global delivers outsourced services and workforce solutions across North America.

What you will do

  • Own and maintain the system security authorization package in eMASS.
  • Prepare and maintain RMF artifacts, including SSPs, SARs, continuous monitoring strategies, and control evidence.
  • Manage POA&Ms, remediation timelines, risk statements, and non-compliance closures.
  • Assess technical and operational impacts on the cARMY AWS architecture, workloads, and cloud boundaries.
  • Review DISA STIGs and SRGs and oversee vulnerability scanning and continuous monitoring through ACAS and related tools.
  • Integrate vulnerability analysis and secure configuration validation into GitLab CI/CD and Agile workflows while tracking dashboards, incidents, and security changes.

Requirements

  • Active Secret security clearance.
  • Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
  • 5+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
  • Active DoDI 8140 qualification.
  • Experience developing RMF authorization artifacts, managing POA&Ms in eMASS or a comparable workflow, and applying NIST SP 800-53 controls and DoD STIGs.
  • Experience with AWS or another cloud environment, vulnerability management, security monitoring, and collaboration with technical and program stakeholders.

Nice to have

  • Experience supporting Army or DoD programs.
  • Experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
  • Experience with containerized workloads, cloud-native services, Linux, databases, web servers, and enterprise system baselines.
  • Familiarity with SAFe and incremental delivery.

Culture & Benefits

  • Contract-to-hire work model.
  • Eligible employees may receive medical, dental, vision, spending account, life insurance, and voluntary plan options.
  • Eligible employees may participate in a 401(k) plan.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →