Omniscius LLC

Security Engineer

• Serve as the designated Information System Security Officer (ISSO) and primary cybersecurity lead for the cloud data platform.
• Lead all security activities supporting the system's Authority to Operate (ATO) and ongoing authorization.
• Develop, maintain, and update security documentation including: System Security Plans (SSPs), POA&Ms, Risk Assessments, Security Assessment Reports (SARs), Continuous Monitoring artifacts.
• Support compliance with: FedRAMP Moderate, FISMA, NIST SP 800-53, NIST SP 800-207 (Zero Trust), FTC security policies.
• Implement and maintain cloud security controls within Microsoft Azure.
• Design and manage identity and access management using Microsoft Entra ID and RBAC.
• Configure and validate encryption for data at rest and in transit.
• Support vulnerability management, remediation planning, and security assessments.
• Coordinate monthly continuous monitoring activities and security metrics reporting.
• Conduct annual risk assessments and security control reviews.
• Support privacy documentation including PTAs and PIAs.
• Work closely with the Government Authorizing Official, System Owner, CISO, COR, and Continuous Assurance teams.
• Assist with incident response, forensic investigations, and security event analysis.
• Coordinate vulnerability scanning, penetration testing, and remediation activities.
• Participate in tabletop exercises, disaster recovery planning, and cyber resilience initiatives.
• Ensure cloud solutions comply with FedRAMP authorization boundaries and federal cybersecurity requirements.
• Provide technical guidance to cloud architects and engineering teams on secure cloud design and implementation.

Information System Security Officer – Cloud Data Platform