Dod Cybersecurity Assessments Engineer Jobs

1 job found

Today

Cybersecurity Engineer, Sr.

AGE Solutions Fort Meade, MD

Fort Meade, MD

Today

$120k+/yr Full time Senior Cloud Platforms Cloud Risk Management

Apply Now

Job Description

Context: Senior Cloud SCA-R Team Lead responsible for cybersecurity risk management and assessment support for a DoD customer, including independent validations and Continuous Monitoring (ConMon) for authorized CSPs and CSOs.

Responsibilities

Conduct cybersecurity assessments and validations of Cloud Service Offerings (CSOs) supporting the DoD Provisional Authorization (PA) process
Evaluate CSP documentation packages per government guidance, including key artifacts:
- Cloud Architecture Diagram
- System Security Plan (SSP) and SSP Addendum
- Readiness Assessment Report (RAR)
- System Architecture
- Security Assessment Plan (SAP) and Security Assessment Report (SAR)
- Associated Plans of Action & Milestones (POA&Ms)
Review and process additional documents for existing provisional authorizations, including:
- Change Requests, Extension Requests, Deviation Requests, Whitelist Requests
- Corrective Action Plans, templates, and process guide approvals
- ConMon artifacts
Prepare and deliver up to 30 Cloud Security Assessment Packages annually, including:
- Validated cybersecurity controls
- Certifier recommendations
- Statement of residual risk
Support technical kickoff activities and review preliminary documentation to assess a CSP readiness posture
Analyze and provide detailed feedback on CSP submissions such as the RAR, SAP, SSP, and architectural diagrams
Assess and document operational impact of authorizations, changes, and vulnerabilities on the CSP environment
Develop Cloud Security Assessment Packages aligned to established guidelines, including SAR, POA&M, and any Deviation Requests
Draft Authorization Recommendation Memoranda covering CSO compliance with DoD cybersecurity controls, residual risks, and technical findings
Prepare formal DoD Provisional Authorization memoranda, covering authorization length, CSO boundary, services provided, operating conditions, DoD usage considerations, and follow-on activities
Validate CSO controls in eMASS or other government-provided GRC tools; ensure accurate tracking in the Mission Status Report (MSR)
Review and verify the Customer Responsibility Matrix (CRM) to ensure correct control inheritance in eMASS/GRC systems
Upload authorization conditions as system-level POA&Ms in eMASS and monitor resolution
Organize and associate received documentation with applicable security controls in eMASS
Maintain and update the DoD Cloud Process Guide, including checklists, templates, forms, and guidance documents
Assist with internal requirements and how-to guides for assessors conducting CSP validations
Document and improve assessment procedures and validation best practices aligned with DoDI 8510.01 and the DoD Cloud Computing Security Requirements Guide (SRG)
Support ongoing development and annual updates to DoD Cloud Assessment Process Guides as requested by the Government

Requirements

Bachelor’s degree (IT-related field preferred)
DoD 8570 IAM/IA Technical (IAT) Level III certification
8 years of overall experience in cybersecurity or network security
US Citizenship required
Maintain an active DoD Top Secret clearance with SCI eligibility
Familiarity with security controls for Azure, AWS, and assorted cloud platforms
Solid understanding of DoD RMF, DoDI 8510.01, and the DoD Cloud Computing Security Requirements Guide (SRG)
Hands-on experience with eMASS or other government-provided GRC tools
Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms
Ability to analyze complex cloud architectures and produce accurate risk assessments
Strong technical writing and communication skills for security assessment reports and formal recommendations
Must reside within commutable distance of Fort Meade, MD for a fully onsite schedule

Technologies

Azure
AWS
eMASS
GRC tools
DoD Risk Management Framework (RMF)

Compensation & Location

Location: Fort Meade, MD (onsite)
Salary: USD 120,000 per year

Benefits

26 Days Paid Leave (vacation, sick, personal time, holidays)
Performance bonuses based on individual contributions and company-wide results
401(k) with match: Company matches 3% with immediate vesting
Company-paid life insurance up to $300K, plus options for additional coverage for you and dependents
Multiple medical plans, dental, vision, FSA and HSA options
15 days fully paid leave for new parents
Military Differential Pay for active duty employees
Paid training and certifications, tuition reimbursement, and tools/tech to perform the role
If the company is sold: CEO committed to returning 80% of net proceeds to employees

About AGE Solutions

Technology and professional services company supporting U.S. government, defense, and intelligence sectors
Provides in-depth consulting, advanced technology solutions, and essential services
Focus on innovation and client-focused solutions to support major agencies and enhance security outcomes

View full job page →

Get Dod Cybersecurity Assessments Engineer Jobs alerts

New Dod Cybersecurity Assessments Engineer Jobs, daily.