Cloud Cyber Security Technical Specialist (Secret Clearance)

Cloud Cyber Security Technical Specialist
Aberdeen Proving Ground - Onsite
Secret clearance is required to start.
Must hold a DoD 8570 IAT Level III certification such as CISSP, CASP+ CE, or CISA.
Must hold a Microsoft Certified Azure Administrator Associate (AZ104) certification or higher.

Qualifications:

1. 3+ years experience in cyber security and information assurance.
2. Bachelor’s degree in a related field.
3. Must hold a DoD 8570 IAT Level III certification such as CISSP, CASP+ CE, or CISA.
4. Must hold a Microsoft Certified Azure Administrator Associate (AZ104) certification or higher.
5. Proficient with cyber security/IT tools such as ACAS, HBSS/ESS, and eMASS.
6. Familiar with DISA Security Technical Implementation Guides (STIGs).
7. Knowledge and understanding of NIST 800 series framework, including the Risk Management Framework Process.
8. Experience in information security, including technical assessment of IT security controls and devices for networks, applications, and systems, particularly cloud-based applications and services in Microsoft Azure.
9. Experience performing IT audit, IT compliance, enterprise risk management, creating/updating/implementing policy, security scanning, providing security-related technical guidance, and hardening devices.
10. Able to act as a subject matter expert in evaluating technical risks, understanding how changes in system configuration and/or network architecture affect a system’s security posture and risk profile, and evaluating and applying technical cybersecurity measures of IT systems and networks at the enclave level.
11. Experience implementing cyber security controls and countermeasures in cloud environments, specifically Microsoft Azure.

Major Duties & Responsibilities:

1. Ensure the security of Azure cloud-based applications by performing scan and patch management, cyber security planning and policy management, cyber auditing, configuration management, Risk Management Framework (RMF) Authorization Management, and DevSecOps.
2. Support the ISSM-O in the creation and maintenance of all required policies, procedures, diagrams, hardware/software listings, and all other necessary artifacts required to obtain and maintain the ATO.
3. Support cyber security tasks including: scan and patch management; planning and policy management; auditing; configuration management; RMF Authorization Management; DevSecOps; incident response; vulnerability scanning; STIG compliance checking; HBSS/Endpoint Security Solution; network access control; and POA&M creation.