Cyber Security Engineer

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

LTS

Site WebLinkedInTous les Emplois

1001 - 5000 employés

🏥 Santé

💼 Conseil

📦 Logistique

Healthcare • Consulting • Logistics

LTS est une entreprise axée sur la mission de soutien gouvernemental et les services de santé, fournissant des réponses d'urgence, de la santé au travail, des solutions de santé automatisées et du conseil en entreprise. Elle offre un déploiement rapide à l'échelle nationale pour les interventions en cas de catastrophe, la logistique et les soins massifs, et met à disposition des kiosques de diagnostic automatisés, des tests de laboratoire diagnostiques, du personnel médical, des cliniques sur site ainsi que la gestion des tests/vaccinations pour les populations mal desservies et éloignées. LTS propose également la modernisation des systèmes informatiques, l'intégration et la gestion des systèmes dans le cloud, la cybersécurité et la gestion des risques, l'IA/ML et l'analyse des données, et la gestion de programme pour les clients fédéraux, étatiques et locaux avec une forte conformité (HIPAA et normes fédérales) et une expérience d'acquisition dans le secteur public.

Description

• Support cybersecurity engineering for the pilot, including cloud security, RMF/ATO support, compliance documentation, and continuous monitoring. • Secure AWS-based environments through identity and access management, encryption, logging, monitoring, network security, vulnerability management, and configuration hardening. • Configure, monitor, and support AWS security services such as AWS Network Firewall, Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, and related capabilities. • Support security planning for an AWS Commercial Cloud environment with consideration for future migration to AWS GovCloud or another VA-approved hosting environment. • Assist with ATO planning, control implementation, evidence collection, compliance reporting, and approval workflows. • Work within eMASS, ServiceNow GRC, or similar risk management systems to support ATO artifacts, information assurance tasking, POA&M tracking, and security documentation. • Develop and maintain SSPs, POA&Ms, SOPs, risk assessments, control narratives, security diagrams, and remediation plans. • Support vulnerability assessments, DISA STIG hardening, configuration compliance reviews, remediation tracking, and audit readiness activities. • Integrate security requirements into architecture, sprint planning, CI/CD processes, testing, and deployment readiness. • Support security reviews for VIA platform capabilities, including data handling, access control, auditability, secure integration, and AI-enabled modernization workflows. • Collaborate with technical and non-technical stakeholders to translate security requirements into practical engineering, documentation, and compliance actions.

🎯 Exigences

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field. • 5+ years of cybersecurity engineering experience supporting federal, cloud, healthcare, or other regulated environments. • Experience securing AWS cloud environments, including IAM, encryption, logging, monitoring, network security, and vulnerability management. • Hands-on experience with AWS security services such as Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, AWS Network Firewall, or similar capabilities. • Experience supporting RMF, ATO, continuous monitoring, risk management, and federal compliance activities. • Familiarity with eMASS, ServiceNow GRC, or similar risk management and authorization systems. • Experience developing or supporting SSPs, POA&Ms, SOPs, control narratives, risk assessments, evidence packages, and remediation plans. • Working knowledge of NIST RMF, NIST SP 800-53 controls, FISMA, FedRAMP, Zero Trust, and federal cybersecurity requirements. • Knowledge of DISA STIGs, secure configuration baselines, system hardening, and vulnerability remediation processes. • Familiarity with DevSecOps, secure SDLC practices, automated security scanning, CI/CD security, and environment hardening. • Strong communication, documentation, analytical, and problem-solving skills.

🏖️ Avantages

• Comprehensive benefits that will provide options to meet employee and family needs