Cyber Security Engineer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Deliver cybersecurity engineering and compliance assistance for FedRAMP and DoD-authorized cloud environments, encompassing IL4–6.

• Provide guidance to partners and clients regarding federal and DoD security regulations, authorization methodologies, control execution, and audit preparedness.

• Create, review, and sustain authorization documentation, which includes SSPs, SAPs, SARs, POA&Ms, FedRAMP appendices, policies, and corresponding evidence.

• Assist in system authorization and reauthorization processes across FedRAMP/RMF, including gap analyses, control validation, evidence generation, and remediation strategies.

• Utilize GRC platforms, APIs, scripts, and automation to enhance compliance workflows, evidence gathering, documentation modifications, control testing, and reporting.

• Establish repeatable and auditable procedures that minimize manual compliance efforts while enhancing the accuracy and consistency of authorization artifacts.

• Work alongside cloud engineering and DevOps teams to design, implement, and validate security controls in AWS, Azure, and hybrid environments.

• Examine system modifications and significant change requests to evaluate security implications, determine documentation updates, and preserve authorization boundaries.

• Collaborate with system owners, engineers, 3PAOs, Authorizing Officials, and government entities to resolve issues and facilitate authorization results.

• Aid in continuous monitoring, vulnerability management, POA&M updates, remediation tracking, and routine compliance obligations.

• Assess security tools and data sources for automated control validation and compliance reporting.

• Monitor changing federal cybersecurity mandates and convert them into actionable technical and operational measures.

⛳️ Requirements

• U.S. citizenship is required.

• Capability to obtain and maintain a Secret or higher security clearance.

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related discipline, or equivalent hands-on experience.

• A minimum of five years of cybersecurity experience, with at least three years focused on federal cloud security engineering, information assurance, RMF, or ISSO roles.

• Proficiency in NIST SP 800-53 Rev. 5, FedRAMP Moderate and High, DoD IL4–6 overlays, RMF, and relevant federal compliance frameworks.

• Experience in developing and maintaining SSPs, POA&Ms, SARs, policies, control evidence, and other authorization documents.

• Background in supporting authorization planning, gap assessments, audit readiness, control execution, and remediation efforts.

• Practical experience with AWS, Azure, or hybrid cloud environments, including IAM, encryption, logging, configuration management, and security monitoring.

• Familiarity with GRC platforms, APIs, scripting, or automation to enhance compliance and security workflows.

• Knowledge of eMASS, Paramify, Nessus/Tenable, Splunk, Prisma Cloud, or similar solutions.

• Possession of CISSP, CGRC/CAP, CISM, Security+, or an equivalent cybersecurity certification.

• Excellent analytical, documentation, problem-solving, communication, and stakeholder management skills.

• Ability to convert federal security requirements into effective technical controls and operational procedures.

• The selected candidate may undergo a background investigation and/or education verification.

• No employer-sponsored immigration or work authorization assistance will be provided.

🏝️ Benefits

• Health insurance coverage.

• Paid leave options.

• Retirement benefits.

• Opportunities for learning and development.

• Competitive compensation package.