Cyber Security Engineer (5462)
$103,100–$1,718,200 year
RemoteUnited States
Job Summary
Conduct cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments, including IL4–6. Advise partners and customers on federal security requirements, authorization strategies, and audit readiness while developing and maintaining authorization documentation such as SSPs, SAPs, and POA&Ms. Leverage GRC platforms, APIs, and automation to streamline evidence collection, control validation, and reporting across AWS, Azure, and hybrid environments. Coordinate with system owners and government stakeholders to address findings, support continuous monitoring, and track evolving federal cybersecurity requirements. This remote role supports a Herndon, VA-based team within a DoD-focused organization.
Required Qualifications
- U.S. citizenship with the ability to obtain and maintain a Secret or higher security clearance
- Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field, or equivalent practical experience
- Five or more years of cybersecurity experience, including at least three years supporting federal cloud security engineering, information assurance, RMF, or ISSO functions
- Knowledge of NIST SP 800-53 Rev. 5, FedRAMP Moderate and High, DoD IL4–6 overlays, RMF, and related federal compliance frameworks
- Experience developing and maintaining SSPs, POA&Ms, SARs, policies, control evidence, and other authorization artifacts
- Experience supporting authorization planning, gap assessments, audit readiness, control implementation, and remediation activities
- Hands-on experience with AWS, Azure, or hybrid cloud environments, including IAM, encryption, logging, configuration management, and security monitoring
- Experience using GRC platforms, APIs, scripting, or automation to improve compliance and security workflows
- Familiarity with tools such as eMASS, Paramify, Nessus/Tenable, Splunk, Prisma Cloud, or comparable solutions
- Strong analytical, documentation, and problem-solving skills with a focus on secure and compliant outcomes
- Excellent communication and stakeholder-management skills, including the ability to advise partners, customers, engineers, and government stakeholders
- Ability to translate federal security requirements into practical technical controls and operational processes
- Ability to obtain and maintain a Secret or higher security clearance
Desired Qualifications
- Experience supporting FedRAMP, DoD, DISA, or federal agency ATO activities
- CISSP, CGRC/CAP, CISM, Security+, or similar cybersecurity certification
- Experience developing automation with Python, PowerShell, REST APIs, infrastructure-as-code, or cloud-native services
- Experience integrating vulnerability, configuration, and cloud-security data into GRC (Paramify) and POA&M workflows
- Familiarity with DevSecOps pipelines, automated security testing, policy-as-code, and continuous control validation
- Knowledge of FISMA, the Privacy Act, and agency-specific security requirements
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.