H2 Performance Consulting

Security Engineer

• Join AWS-based cloud operations team working with AWS DSO Cloud Engineers and ITSM Analysts/Developers to secure cloud environments.
• Develop and maintain a comprehensive cybersecurity architecture for AWS cloud environments aligned with DoD Instruction 8510.01 and Navy RMF Process Guide.
• Lead creation, review, and maintenance of authorization artifacts including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POAMs) in eMASS.
• Conduct NIST 800-53 control assessments, technical security testing, and vulnerability scans using ACAS, STIGs, and AWS-native security services to support ATO processes.
• Manage authorization maintenance activities: annual security reviews, POAM updates, and compliance with ATO stipulations across IaaS, PaaS, and SaaS.
• Collaborate with cloud engineers to perform security impact analyses for system changes and secure integration of IaC and DevSecOps pipelines.
• Use Amazon GuardDuty, CloudWatch, AWS Security Hub, CloudTrail, and Splunk for event monitoring, log analysis, and incident response.
• Establish and maintain inheritance profiles with AWS Cloud Service Providers to streamline compliance and reduce assessment overhead.
• Support cybersecurity processes including CCRI, Web Risk Assessments, and audits by providing documentation and remediation plans.
• Integrate security findings into Remedy workflows with ITSM Analyst/Developer team for incident and problem management.
• Implement and manage security tools like Trellix, Invicti, and Anchore to identify vulnerabilities and ensure STIG compliance.
• Provide technical guidance on interpreting ACAS and STIG results and recommend improvements to processes, policies, and tools.
• Document security configurations, processes, and lessons learned; participate in Agile processes and engage with the Cloud Center of Excellence.

Cloud Information Systems Security Engineer, ISSE