AWS Cyber Security Engineer

General Dynamics•Falls Church, VA

50d•$110,614 - $138,000•Remote

About The Position

GDIT is seeking a AWS Security Cloud Engineer to join our Federal Health division managing the security of GDIT's Analytic platform environment. The AWS Security Cloud Engineers typically include the following responsibilities and skills: Implementing Security Controls: Developing and applying security measures to protect AWS workloads and infrastructure. Conducting Security Assessments: Regularly evaluating the security posture of AWS environments to identify vulnerabilities using AWS security services such as GuardDuty, Cloudwatch,.etc. Responding to Security Incidents: Investigating and remediating security breaches and incidents to minimize damage and prevent future occurrences. Compliance with Regulations: Ensuring adherence to security regulations and industry standards, such as NIST 800-171 Educating Stakeholders: Sharing the best practices for cloud security with other stakeholders within the organization. Collaborating with the Lighthouse Information Security and compliance team to develop Genesis global Cloud security architecture and maturity standards1 Evaluate and respond to alerts and events from the security tools, including tuning of tool configuration to minimize false positives, development of event response documentation and processes for Security Operations Center response to follow for event actions, and escalating to appropriate teams for event response Work with the Cloud Operations teams in the definition and implementation of security standards and best practices Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations Acts as subject matter expert (SME) for security tools, applications and processes, including AWS Security tools, Palo Alto firewall, Qualys vulnerability management, Helping the engineering productivity team and others in solving cyber security problems in a way that not only comply with required standards, but also contribute materially to the security of Target systems Work closely with functional-area architects, engineering, and security specialists throughout the company to ensure adequate security solutions and controls are in place Monitor cloud environments for security threats Conduct risk assessments and vulnerability scans Develop and enforce cloud security policies Collaborate with DevOps and engineering teams Respond to security incidents and perform root cause analysis Ensure compliance with security standards and regulations Automate security controls and processes Manage identity and access controls in cloud platforms Design and implement secure cloud architectures Implement and automate DISA STIG and SCAP standards across Windows, Red Hat, PanOS, and other applications. Maintain documentation

Requirements

Bachelor's degree in computer science or related field or equivalent number of year experience
5+ years of experience in cloud security or cybersecurity
Must have hands on experience with AWS security tools
Experience with security tools like CloudTrail, GuardDuty, or Splunk (SIEM)
Knowledge of network security and firewalls
Understanding of compliance frameworks
Strong analytical and problem-solving skills
Excellent communication and teamwork abilities

Nice To Haves

Relevant certifications (e.g., CCSP, AWS Security Specialty) are a plus

Responsibilities

Implementing Security Controls: Developing and applying security measures to protect AWS workloads and infrastructure.
Conducting Security Assessments: Regularly evaluating the security posture of AWS environments to identify vulnerabilities using AWS security services such as GuardDuty, Cloudwatch,.etc.
Responding to Security Incidents: Investigating and remediating security breaches and incidents to minimize damage and prevent future occurrences.
Compliance with Regulations: Ensuring adherence to security regulations and industry standards, such as NIST 800-171
Educating Stakeholders: Sharing the best practices for cloud security with other stakeholders within the organization.
Collaborating with the Lighthouse Information Security and compliance team to develop Genesis global Cloud security architecture and maturity standards1
Evaluate and respond to alerts and events from the security tools, including tuning of tool configuration to minimize false positives, development of event response documentation and processes for Security Operations Center response to follow for event actions, and escalating to appropriate teams for event response
Work with the Cloud Operations teams in the definition and implementation of security standards and best practices
Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations
Acts as subject matter expert (SME) for security tools, applications and processes, including AWS Security tools, Palo Alto firewall, Qualys vulnerability management,
Helping the engineering productivity team and others in solving cyber security problems in a way that not only comply with required standards, but also contribute materially to the security of Target systems
Work closely with functional-area architects, engineering, and security specialists throughout the company to ensure adequate security solutions and controls are in place
Monitor cloud environments for security threats
Conduct risk assessments and vulnerability scans
Develop and enforce cloud security policies
Collaborate with DevOps and engineering teams
Respond to security incidents and perform root cause analysis
Ensure compliance with security standards and regulations
Automate security controls and processes
Manage identity and access controls in cloud platforms
Design and implement secure cloud architectures
Implement and automate DISA STIG and SCAP standards across Windows, Red Hat, PanOS, and other applications.
Maintain documentation