Senior Cyber Security Engineer

Senior Cybersecurity Engineer

We have an immediate need for a Senior Cyber Security Engineer to join an exceptional Northern Virginia firm!

This is an excellent opportunity to showcase your skillset while also advancing your career using premier technology!

The successful candidate will be working on a team of Information Security specialists that are accountable for on-prem and cloud infrastructure security program.

We are looking for a candidate who is enthusiastic about security and enjoys collaborating with engineers and developers to design secure solutions that will uphold the security of our hybrid infrastructure. Some of the areas that you will focus on include identity access management, infrastructure-as-code, cloud services, Kubernetes/container solutions, and vulnerability management.

*This is a HYBRID position working onsite in Northern Virginia*

Responsibilities:

• Architect and implement security solutions across multiple cloud environments (AWS, Azure)
• Monitor cloud security posture, suggest improvements, and help guide the Cloud Security program to greater levels of efficacy.
• Partner with Platform Engineers, Product Engineers and other Information Security teams to adopt security standards across a range of areas, including Container Security, Infrastructure as Code, Identity and Access Management, Resource Policies, Virtual Host Security, and Data Protection
• Provide security guidance to development teams supporting internal and external client solutions.
• Coordinate security enhancements and deployment efforts for implementing client solutions.
• Implement, integrate and manage security tools for use in public and private cloud environments.

.

Qualifications:

• Strong AWS Cloud knowledge (IAM, VPC, Security Groups, S3, KMS, etc)
• Demonstrated experience with evaluating identity-based policies, resource-based policies, access control lists (ACLs), permissions boundaries, and Service control policies
• Hands-on experience within a DevSecOps practice with a focus on container and orchestration security
• Experience with Cloud Native Application Architectures and their associated security risks
• Experience with integration and management of holistic cloud security monitoring solutions
• Hands-on experience implementing secure configurations for AWS-managed services
• Ability to architect solutions across cloud services to auto-remediate risks
• Bachelor’s degree in information security or equivalent education and/or experience
• One or more cloud-related security certifications
• 10+ years of related experience or commensurate skills in one or more of the following areas:
• Cloud Security
• Threat and Vulnerability Management
• DevSecOps
• Product/Application Security
• Platform Engineering

Need to Have Skills

• Configuration and Management of InfoSec Tools
• Experience with configuring and managing security tools and platforms.
• Automation
• Proficiency in automating security processes and tasks.
• DevSecOps
• Experience integrating security practices into DevOps workflows.
• Infrastructure as Code (IaC)
• Skills in using IaC tools such as Terraform, CloudFormation, or Ansible.
• Cloud Computing
• Proficiency in building and managing secure cloud environments (AWS, Azure, GCP).
• Cyber Security Background
• Experience working on cyber security initiatives.
• Holding cyber security certifications (e.g., CISSP, CISM, CEH).

Nice to Have Skills

• Programming Skills
• Knowledge of programming languages such as Python, Java, or Go.
• Deeper Cyber Security Knowledge
• Advanced understanding of cyber security principles and practices.
• Vulnerability Management
• Experience in identifying, assessing, and mitigating vulnerabilities.
• Incident Response
• Skills in responding to and managing security incidents.
• Application Security (AppSec)
• Knowledge of securing software applications and performing security assessments.