Cloud Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Ensure the security of AWS environments that host CBP mission applications.

• Develop and manage cloud security controls.

• Integrate security checks into delivery pipelines.

• Oversee vulnerabilities and monitor findings through remediation using POA&Ms.

• Assist with Authority to Operate (ATO) and continuous monitoring procedures.

• Align controls with NIST SP 800-53 and DHS 4300A, collect evidence, and revise system security plans.

• Strengthen systems, containers, and Kubernetes clusters to meet DISA STIGs and CIS Benchmarks.

• Promote zero trust architecture via identity-based access, micro-segmentation, and least privilege principles.

• Identify and respond to security incidents utilizing SIEM tools like Splunk.

• Aid in incident response and perform root cause analysis.

• Automate security checks and remediation processes using Python, AWS Lambda, or policy as code.

• Evaluate cloud architectures and modifications for potential security risks.

• Provide guidance to platform engineers, developers, and CBP security personnel.

⛳️ Requirements

• Must be a U.S. citizen.

• Capable of obtaining and maintaining a CBP Public Trust background investigation.

• Minimum of seven (7) years of experience in cybersecurity, cloud, or systems engineering, with at least three (3) years focused on securing AWS environments.

• Practical experience with AWS IAM, VPC security, KMS, and AWS native security services.

• Familiarity with NIST SP 800-53, the Risk Management Framework (RMF), and federal ATO procedures.

• Experience using vulnerability scanning tools (Tenable/Nessus, Qualys, or Prisma Cloud) and SIEM platforms like Splunk.

• Proven expertise in securing containers and Kubernetes.

• Proficient in scripting with Python or Bash; experience with infrastructure as code using Terraform.

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field.

• Ability to work remotely during East Coast hours and travel around once per quarter.

• Possession of CISSP, CCSP, or AWS Certified Security Specialty certifications.

• Experience with DHS 4300A, Continuous Diagnostics and Mitigation (CDM), and FedRAMP.

• Familiarity with AWS GovCloud (US).

• Prior experience supporting DHS or CBP systems.

• A current DHS Public Trust (CBP, ICE, USCIS, CISA, or another DHS component).

🏝️ Benefits

• Flexible remote work arrangement.

• Alignment with East Coast working hours.

• Opportunity to travel approximately once per quarter.

• Immediate start available upon successful suitability determination and customer onboarding.