Responsibilities:
- Security Design and Implementation: Design, implement, and maintain security solutions within a hybrid Azure cloud environment, ensuring compliance with DoD, NIST, and RMF standards.
- System Hardening: Apply security measures to harden systems, including network devices, servers, and cloud components to protect against threats and vulnerabilities.
- Risk Management: Conduct risk assessments, develop and update security policies, and implement security controls to mitigate identified risks.
- Compliance and Auditing: Ensure systems and processes adhere to federal and military standards, including FISMA, RMF, and DISA STIGs. Prepare for and assist with audits, including ATO processes.
- Incident Response: Participate in incident response planning and execution, including the detection, analysis, and resolution of security incidents in cloud environments.
- Documentation: Produce comprehensive security documentation, including system security plans, security impact analyses, and standard operating procedures.
- Collaboration: Work closely with cross-functional teams, including system administrators, network engineers, and software developers to integrate security into all aspects of IT operations.
- Continuous Monitoring: Implement and manage continuous monitoring strategies to detect and respond to security issues promptly.
Qualifications:
- Minimum of 4 years of experience in cybersecurity, with at least 3 years specifically in cloud security, preferably Azure.
- Experience with the DoD Risk Management Framework (RMF) process.
- Strong knowledge of network security, identity and access management, and encryption technologies.
- Experience with scripting (e.g., PowerShell) for automation and security tasks.
- Excellent problem-solving abilities, strong analytical skills, and the capability to work in a fast-paced environment. Good communication skills to interface with various stakeholders.
Education:
- Bachelor’s degree with 8+ years of experience or a Master’s degree with 2+ years of experience. Additional experience maybe considered in lieu of a degree