Cyber Security Engineer

Location: Chantilly, VA

Department: USG

Freedom Technology Solutions Group is seeking Cyber Security Engineers with various levels of experience (Junior–Senior and SME Levels) providing Sponsor Support located in Chantilly, VA. The Sponsor manages security assessment, security compliance, change management, and continuous monitoring responsibilities across multiple cloud service providers. The work requires a healthy mix of technical and policy knowledge. The Sponsor requires support with understanding and implementing standards (ICD 503, NIST Risk Management Framework, and cloud technologies). The Sponsor needs polished skills in information system security engineering, and security control assessment. The work will be driven by the Sponsors’ needs and priorities.

Required Experience:

• Active Security Clearance
• Bachelor’s degree in computer science, Cyber Security, Engineering, or related field
• 3 - 20 years of related professional experience
• Maintaining assessment and authorization (A&A) packages across multiple services or systems in accordance with FIPS-199, NIST 800-53, and CNSS 1253
• Designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, IBM Cloud, or Microsoft Azure cloud architecture
• Continuous monitoring, analyzing scans from (Rapid 7, Nessus, and Qualys) of critical or high findings
• Utilizing or reviewing cross domain technology and common architecture designs
• Consulting project teams on system architecture and security posture
• Creating, monitoring, or closing system or service Plans Actions and Milestone items (POA&Ms)
• Utilizing compliance tools to track assessment and authorization activities (Xacta 360, Risk Vision, RSA Archer)
• Common control provider concept within the NIST Risk Management and Security Control Frameworks
• Security control assessments to include working with SCAs and preparing security packages for SCAs
• Conducting information system security engineering activities
• General knowledge of cloud architecture and design (Amazon Web Services, Google Cloud, Oracle Cloud, Microsoft Azure, and IBM Cloud)
• Facilitating TEMs with cloud service providers to review cloud service architectures
• Using the Sponsors or IC element A&A process
• Creating or reviewing A&A body of evidence documentation in a cloud security environment
• Identifying, implementing, or reviewing appropriate information security controls
• Working in Xacta 360