Cyber Security Engineer

BT-370 – Cyber Security EngineerSkill Level- Expert/Subject Matter ExpertHerndon, VA (fully on-site, no remote option)Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**RequiredDemonstrates experience conducting security assessments, particularly for cloud infrastructure and cloud services.Demonstrates experience facilitating TEMs with cloud service providers to review cloud service architecturesDemonstrates experience designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, or Microsoft Azure cloud architecture.Demonstrates experience utilizing or reviewing cross domain technology and common architecture designs.Demonstrates experience with continuous monitoring requirements to include scan analysis for critical or high findings with common scan tools such as Rapid 7, Nessus, and Qualys.Demonstrates experience monitoring or closing Plan of Action and Milestone items (POA&Ms).Demonstrates experience utilizing compliance tools to track assessment and authorization activities such as Xacta 360, Risk Vision, RSA Archer.Demonstrates experience with the common control provider concept within the NIST Risk Management Framework.Demonstrates experience with security control assessments to include working with SCAs and preparing security packages for SCAs.Demonstrates experience conducting information system security engineering activities.Demonstrates project management experience including project planning, task tracking, milestone management, and resource coordinationDemonstrates experience developing and maintaining program metrics, performance indicators, and compliance status dashboardsDemonstrates experience preparing technical reports, program highlights, status briefings, and leadership communicationsDesiredSkills and Demonstrates knowledge that are highly desired but not required to perform the work include:Demonstrates experience using the Sponsor’s or IC element A&A process.Demonstrates experience creating or reviewing A&A body of evidence documentation in a cloud security environment.Demonstrates experience identifying, implementing, or reviewing appropriate information security controls.Demonstrates experience working in Xacta 360Demonstrates experience with Sponsor’s A&A tools.Demonstrates experience assessing cloud infrastructure and cloud services for security gaps and weaknesses according to industry standards. Demonstrates experience reviewing cloud service provider body of evidence packages for completeness and accuracy.Demonstrates experience facilitating technical exchange meetings (TEMs) with cloud service providers to review cloud service architectures.Demonstrates experience providing project management support including project planning, task tracking, milestone management, and resource coordination to ensure timely delivery of all contract requirements.