Cloud Information Assurance Engineer

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. The annual salary range for this role is $135,000-$155,000. Our employees enjoy more than just a great work environment!

This position will be based at Tysons, VA Google Client Site

Overview:

As a Cloud Information Assurance Engineer, you will contribute the end-to-end compliance lifecycle for client cloud products, guiding them from initial inception through final authorization. This role demands a balanced expertise in GRC governance and hands-on Cloud Security Engineering, all while navigating our client's unique, fast-paced environment. The ideal candidate will combine a deep technical understanding of cloud architectures and security with proficiency in the Risk Management Framework (RMF) to drive secure innovation.

Responsibilities include:

• Steer novel cloud services and products from inception to authorization.
• Partner with engineering and compliance teams to develop all necessary artifacts for the compliance package.
• Conduct Security Impact Analyses (SIAs) for all System Change Requests (SCRs) and update compliance documentation to reflect approved changes.
• Perform end-to-end maintenance of System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
• Lead internal and external audit evidence management, ensuring 100% on-time fulfillment of requests.
• Maintain and update compliance artifacts in GRC tools, ensuring precise mapping of controls to frameworks.
• Consult with engineering teams to ensure security controls are defined and implemented throughout the system development lifecycle.
• Collaborate with the Configuration Change Board (CCB) to ensure changes align with security policies and verify that they do not introduce new vulnerabilities.
• Leverage client automation tools to identify security workflow bottlenecks and design automated solutions for compliance operations.