TL;DR
Lead Security Engineer (GovCloud): Designing and implementing robust security measures and policies for Government Cloud Services with an accent on risk assessment, vulnerability management, and incident response. Focus on securing cloud infrastructure as code, ensuring compliance with security frameworks, and safeguarding critical assets.
Location: Must be a US Citizen operating on US Soil.
Company
hirify.global provides Government Cloud Services, specializing in secure cloud solutions for government clients.
What you will do
- Apply security policies and assess access controls to meet system objectives.
- Assess configuration management processes and the effectiveness of security controls.
- Develop and implement comprehensive security policies, procedures, and guidelines.
- Conduct security risk assessments, vulnerability assessments, and penetration tests.
- Collaborate to design and implement security controls, including firewalls and IDS/IPS.
- Liaison with Incident Response teams on incidents and develop security awareness programs.
Requirements
- Proven experience (5+ years) in a security analyst role with focus on information security, incident response, and vulnerability management.
- Strong understanding of security frameworks such as ISO 27001, NIST, or CIS Controls.
- Extensive knowledge of security technologies including firewalls, IDS/IPS, SIEM, DLP.
- Hands-on experience with vulnerability assessment tools and penetration testing methodologies.
- Proficiency in log analysis, incident response, and forensic investigation techniques.
- Experience with cloud infrastructure as code (IaC) like Terraform, CloudFormation, or Azure Resource Manager, and Git.
- Must be a US Citizen operating on US Soil and pass enhanced background checks.
Nice to have
- Professional certifications such as CISSP, CISM, or CEH.
Culture & Benefits
- Opportunity to make a significant impact on the organization's security posture.
- Contribute to overall company success in a fast-paced environment.
Будьте осторожны: если вас просят войти в iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →