Security Engineer

• Provide comprehensive cyber and cloud security leadership ensuring all cloud environments are designed, maintained, and operated securely and efficiently.
• Develop and implement the overall cybersecurity strategy aligned with DoD, DISA, NIST (SP 800-53), FISMA, and MC&FP requirements.
• Lead cloud risk management and IT security compliance initiatives, including application of the Risk Management Framework (RMF) across all MC&FP systems.
• Oversee daily monitoring, threat detection, and incident handling for cloud-based resources, including AWS GovCloud environments.
• Implement advanced security architectures for predictive threat detection and proactive incident response.
• Maintain and regularly test contingency plans, disaster recovery (DR), and continuity of operations (COOP) procedures for cloud infrastructure.
• Provide direct support for vulnerability management, penetration testing, and mitigation of security risks.
• Ensure continued Authorization to Operate (ATO) status for cloud systems at relevant impact levels.
• Conduct bi-annual audits of IT and cybersecurity SOPs, documenting and remediating compliance gaps.
• Oversee routine and ad-hoc reporting of compliance status, incidents, and risk metrics through dashboards and official reports.
• Coordinate with Tier 2 CSSPs and government cyber teams to ensure seamless lifecycle management and reporting for incidents and vulnerabilities.
• Adhere to and enforce compliance with all applicable STIGs, SRGs, IAVAs, and other cybersecurity requirements.
• Catalog and inventory all cloud configuration items (CIs), and maintain an up-to-date configuration management (CM) database with strong data integrity and availability measures.
• Oversee review and implementation of secure configurations and baseline management for all cloud resources.
• Serve as Secretariat for the Configuration Control Board (CCB), maintaining records, policies, procedures, and facilitating CCB meetings.
• Manage the change control process for all information systems, networks, and security modifications.
• Lead or support scenario planning exercises, threat simulation labs, and cross-agency security drills.
• Identify and recommend the implementation of emerging security technologies, automation, and best practices to advance security posture.
• Develop and implement automated incident response workflows and playbooks.
• Serve as principal cloud security advisor to leadership, project managers, developers, and IT engineering teams.
• Collaborate with government stakeholders, technical teams, and external partners to ensure secure design, deployment, and operation of cloud systems.
• Provide cloud cybersecurity guidance and training to staff and ensure all stakeholders are informed of their security responsibilities.
• Ensure that account provisioning, privilege management, and access controls for cloud systems are implemented and regularly reviewed.
• Maintain compliance with the DoD Cyber Workforce Framework (DCWF), ensuring staff certifications and training are up to date.

Cloud Cybersecurity Manager – Military Community and Family Policy

Information System Security Manager – ISSM

National Security Business Development Executive

Industrial Security Representative

Industrial Security Coordinator