Cybersecurity Engineer, Sr. (Cloud SCA-R)

Description

The company is a technology and professional services firm that consults on and delivers technology solutions and essential services for U.S. government, defense, and intelligence clients.

This senior role is a team lead position supporting a upcoming cybersecurity risk management and assessment program for a Department of Defense customer.

You will analyze cloud service provider submissions, independently validate assessments, and run continuous monitoring (ConMon) for authorized cloud service providers (CSPs) and cloud service offerings (CSOs).

Responsibilities

• Assess and validate cybersecurity controls for cloud service offerings (CSOs) as part of the DoD Provisional Authorization (PA) process.
• Review CSP documentation under government guidance and procedures, including the cloud architecture diagram, system security plan (SSP) and addendum, readiness assessment report (RAR), system architecture, security assessment plan (SAP), security assessment report (SAR), and plans of action and milestones (POA&Ms).
• Review and process change requests, extension requests, deviation requests, whitelist requests, corrective action plans, templates, process guide approvals, and ConMon artifacts for existing provisional authorizations.
• Produce up to 30 assessment packages per year, each with validated controls, certifier recommendations, and a statement of residual risk.
• Join technical kickoff meetings and review early documentation to judge a CSP's readiness.
• Give detailed written feedback on CSP submissions such as the RAR, SAP, SSP, and architecture diagrams.
• Assess and record how authorizations, changes, and vulnerabilities affect the CSP environment.
• Build assessment packages to established guidelines, including the SAR, POA&M, and any deviation requests.
• Write authorization recommendation memoranda covering CSO compliance with DoD cybersecurity controls, residual risks, and technical findings.
• Draft formal DoD Provisional Authorization memoranda that set out the authorization length, CSO boundary, services, operating conditions, DoD usage considerations, and follow-on actions.
• Validate CSO controls in eMASS or other government-provided governance, risk, and compliance (GRC) tools, and keep the Mission Status Report (MSR) accurate.
• Check the Customer Responsibility Matrix (CRM) and confirm control inheritance is reflected in eMASS or GRC systems.
• Load authorization conditions into eMASS as system-level POA&Ms and track them until closed.
• Link all received documents to the right security controls in eMASS.
• Maintain the DoD Cloud Process Guide, including its checklists, templates, forms, and guidance.
• Help write internal requirements and how-to guides for assessors running CSP validations.
• Document and improve assessment procedures and validation practices so they match DoDI 8510.01 and the DoD Cloud Computing Security Requirements Guide (SRG).
• Help update the DoD Cloud Assessment Process Guides each year and at the government's request.

Requirements

• A bachelor's degree is required; an IT-related field is preferred.
• DoD 8570 IAM/IA Technical (IAT) Level III certification.
• Eight years of overall experience in a cybersecurity or network security role.
• Familiarity with security controls for Azure, AWS, and other cloud platforms.
• Solid grasp of the DoD Risk Management Framework (RMF), DoDI 8510.01, and the DoD Cloud Computing Security Requirements Guide (SRG).
• Hands-on experience with eMASS or other government-provided GRC tools.
• Familiarity with cloud security documents, including SSPs, SARs, RARs, and POA&Ms.
• Ability to examine complex cloud architectures and give accurate risk assessments.
• Strong technical writing and communication skills for security assessment reports and formal recommendations.

Conditions

US citizenship is required.

You must hold an active DoD Top Secret clearance with SCI eligibility and keep it active.

To work a fully onsite schedule, you must live within commuting distance of Ft. Meade, MD.

The projected salary is $120,000+ per year. Final pay depends on years of relevant experience, clearance level, certifications, technical skills, contract requirements, and overall qualifications.

Benefits

• 26 days of paid leave covering vacation, sick time, personal time, and holidays, used however you choose.
• Performance bonuses based on individual contributions and company-wide results.
• 401(k) with a 3% company match that vests immediately.
• Company-paid life insurance up to $300K, plus optional extra coverage for you and your dependents.
• Medical plans, dental, vision, FSA, and HSA options.
• 15 days of fully paid parental leave for new parents.
• Military differential pay that makes up the income gap for employees on active duty.
• Paid training and certifications, tuition reimbursement, and the tools and technology needed for the job.
• If the company is sold, the CEO has committed to returning 80% of net proceeds to employees.