System Engineer 645

Responsibilities

• Assess cloud security technologies for security gaps and weaknesses according to industry standards.
• Review cloud security body of evidence packages for completeness and accuracy.
• Facilitate TEMs with cloud service providers to review cloud service architectures.
• Provide project management support including project planning, task tracking, milestone management, and resource coordination.

Technical Requirements

• Manage security assessment, security compliance, change management, and continuous monitoring activities, including associated program management functions, across four (4) CSPs: AWS, Google Cloud, Oracle Cloud, and Microsoft Azure.
• Analyze security scan findings and perform risk analysis on the findings.
• Collaborate with other internal components and security peers to determine security and potential weaknesses of cloud infrastructure and cloud services.
• Advise Sponsor leadership on cloud security services.
• Analyze system alerts to determine if a security weakness exists and document risk mitigation procedures.
• Sustain and evolve the Sponsor's standard operating procedures to meet Program Objectives.
• Facilitate technical exchange meetings (TEMs) with cloud service providers to review cloud service architectures.
• Provide program management support including project planning, task tracking, milestone management, and resource coordination.
• Develop and maintain program metrics and performance indicators including security assessment completion rates, finding remediation timelines, compliance status dashboards, and other KPIs as directed by the Sponsor.
• Respond to Sponsor inquiries and requests for information within established timelines, providing accurate and complete technical and programmatic information.
• Prepare periodic program highlights, status reports, and briefing materials for Sponsor leadership.
• Support ad hoc taskings from the Sponsor including research, analysis, documentation, and coordination activities.
• Maintain regular communications with the Sponsor through scheduled status meetings, written reports, and other communication channels.

Required Skills

• Facilitating TEMs with cloud service providers to review cloud service architectures
• Active Security Clearance with Polygraph.
• Maintaining A&A packages across multiple services/systems in accordance with FIPS-199, NIST 800-53, and CNSS 1253
• Designing, implementing, assessing or reviewing systems utilizing cloud technology with AWS, Oracle Cloud, Google Cloud, or Microsoft Azure
• Utilizing or reviewing cross domain technology and common architecture designs
• Continuous monitoring requirements including scan analysis with tools such as Rapid 7, Nessus, and Qualys
• Creating, monitoring, or closing POA&Ms
• Utilizing compliance tools such as Xacta 360, Risk Vision, RSA Archer
• Common control provider concept within the NIST RMF
• Security control assessments including working with SCAs and preparing security packages
• Information system security engineering activities
• Project management including planning, task tracking, milestone management, and resource coordination
• Developing and maintaining program metrics, performance indicators, and compliance status dashboards
• Preparing technical reports, program highlights, status briefings, and leadership communications

Desired Skills

• Using the Sponsor's or IC element A&A process
• Creating or reviewing A&A body of evidence documentation in a cloud security environment
• Identifying, implementing, or reviewing appropriate information security controls
• Working in Xacta 360
• Experience with Sponsor's A&A tools

What's in It for You?

• Flexible work environment
• A team mentality - work with friendly, like-minded professionals
• Work with innovative, cutting edge technologies

Enjoy extremely competitive compensation and benefits

• A work-life balance you can count on
• Opportunities to grow and advance your career on our dime

The Benefits You Get with Freedom

• Amazing benefits including matching 401k, fully paid medical, and more
• Generous paid time off - including paid site closure days
• Competitive salary offerings
• Paid training and tuition reimbursement
• Referral bonuses
• Fully paid life and disability
• Annual logo wear allowance

Company sponsored events (game nights, holiday party, summer party, happy hours)

• Interested in learning more about Freedom and our culture?
• Contact us today!
• We're constantly hosting hiring events in our office and elsewhere, to help you get a sense of what life is like at Freedom before joining the team.