Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Мало
$120к/год
$140к$160кмедиана$180к
По похожим ролям (50) ~ $160к/год
На СНГ рынке: $5.1к/мес ($3.2к - $7.9к)
70
Хорошая вакансия
развернуть
У роли чёткий фокус на облачной безопасности, серьёзные задачи по оценке рисков DoD и сильные условия по отпуску и развитию; обязательный офисный формат и допуск к секретной информации заметно сужают круг тех, кому доступна эта возможность.
Кликните для подробной информации
Ниже рынкаОфис и допускАктуальные облакаСильный соцпакет
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Cybersecurity Engineer, Sr. (Cloud SCA-R) (Cloud Security/DoD RMF): Conducting cybersecurity assessments, control validations, and continuous monitoring for Department of Defense cloud service offerings with an accent on AWS and Azure security controls, eMASS/GRC tracking, and formal authorization documentation. Focus on analyzing complex cloud architectures, validating CSP evidence, documenting residual risk, and preparing DoD Provisional Authorization recommendations.
Location: Fully onsite in Ft. Meade, MD; candidates must reside within a commutable distance.
Salary: $120,000+ annually.
Company
hirify.global provides consulting, technology solutions, and professional services to U.S. government, defense, and intelligence customers.
What you will do
Conduct cybersecurity assessments, independent validations, and continuous monitoring for Cloud Service Offerings and Cloud Service Providers supporting the DoD Provisional Authorization process.
Review CSP security documentation, cloud architectures, control evidence, change and deviation requests, corrective action plans, and continuous monitoring artifacts.
Prepare up to 30 Cloud Security Assessment Packages annually, including Security Assessment Reports, POA&Ms, certifier recommendations, and residual-risk statements.
Draft authorization recommendation memoranda and formal DoD Provisional Authorization memoranda covering CSO boundaries, operating conditions, authorization periods, and follow-on activities.
Validate controls, inherited responsibilities, authorization conditions, and documentation in eMASS or other government GRC tools; maintain accurate Mission Status Report tracking.
Maintain DoD Cloud Process Guides and contribute to assessor guidance, validation procedures, checklists, templates, and annual process-guide updates.
Requirements
Bachelor’s degree, preferably in an IT-related field.
DoD 8570 IAM/IA Technical IAT Level III certification.
Eight years of overall experience in cybersecurity or network security.
U.S. citizenship is required.
Active DoD Top Secret clearance with SCI eligibility must be maintained.
Familiarity with security controls for Azure, AWS, and other cloud platforms.
Strong understanding of the DoD Risk Management Framework, DoDI 8510.01, and the DoD Cloud Computing Security Requirements Guide.
Hands-on experience with eMASS or other government-provided GRC tools.
Experience with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms.
Ability to analyze complex cloud architectures and provide accurate risk assessments, with strong technical writing and communication skills for assessment reports and formal recommendations.
Must reside within a commutable distance of Ft. Meade, MD for a fully onsite schedule.
Culture & Benefits
26 days of paid leave covering vacation, sick, personal time, and holidays.
Performance bonuses and a 401(k) with a 3% company match and immediate vesting.
Medical, dental, vision, FSA, HSA, life insurance, and parental-leave benefits.
Military differential pay for employees on active duty.
Paid training and certifications, tuition reimbursement, and professional development support.
Employees share in long-term company value through a commitment to return 80% of net sale proceeds.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →