Cybersecurity Engineer, Information Assurance
Job Description:
- Implement, maintain, and assess security controls for Azure and hybrid enterprise systems in accordance with organizational policies and applicable cybersecurity standards
- Support security compliance and authorization activities, including preparation, review, and maintenance of required security documentation and artifacts
- Conduct security control validation, vulnerability analysis, and risk assessment activities across systems and platforms
- Monitor system security posture and coordinate with engineering teams to remediate identified vulnerabilities and findings
- Provide IA guidance during system changes, deployments, and upgrades to ensure security controls remain effective and compliant
- Support incident response and cybersecurity event handling, including analysis, containment support, and post-incident remediation activities
- Review system configurations, architectures, and operational procedures to identify security gaps and risk areas
- Collaborate with Senior Azure Systems & Platform Engineers and Azure Architects to ensure security requirements are integrated into system designs and implementations
- Assist with continuous monitoring activities, including review of security-relevant logs, alerts, and assessment results
- Support audits, inspections, and compliance reviews by providing technical input, evidence, and security expertise
- Track and manage plans of action and milestones (POA&M) and remediation efforts, as applicable
- Maintain accurate security documentation, including control implementations, assessment results, and remediation records
- Ensure compliance with DoD 8140 / DCWF qualification requirements and maintain required professional certifications and continuing education
Requirements:
- Minimum 4 years of cybersecurity/IA/security engineering experience (or equivalent)
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field OR an equivalent combination of education, training, and experience
- Demonstrated hands-on experience supporting or securing Microsoft Azure environments
- Certifications (Required): Microsoft Certified: Azure Administrator Associate or higher
- Must meet DoD 8570 / 8140 IAT-II requirements (examples include Security+, SSCP, GSEC, etc.)
- Active Secret clearance
- Advanced security certifications (e.g., CISSP/CISM/CAP-type credentials) (Preferred)
- Experience with secure cloud architecture patterns in Azure (identity, access, segmentation, logging/monitoring) (Preferred)
- Familiarity with RMF-style compliance workflows in regulated environments (Preferred)
Benefits:
- Professional Development: Maintain continuous professional development