Cloud Cyber Engineer II

AMERICAN SYSTEMS•Quantico Base, VA

1d•$110,000 - $140,000

About The Position

Now Hiring at AMERICAN SYSTEMS Epsilon, Inc. has joined AMERICAN SYSTEMS! As one organization, we offer expanded resources, streamlined operations, and increased opportunities for growth and development. Join us to be part of a dynamic, collaborative environment dedicated to innovation and customer success.

Requirements

All candidates must be a U.S. Citizen.
Must hold active DOD Interim Secret or Secret Clearance.
8570 compliant IAT Level III Certification required (CASP+, CCNP Security, CISA, CISSP, GCED, GCIH, CCSP).
Must have an Azure Cloud Security Certification.
Experience with policy management in security tools like CrowdStrike or Defender.
Working knowledge of McAfee endpoint security solutions.
Advanced knowledge of Linux and Windows desktop and server operating systems.
Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, network monitoring, log management, content filtering, etc.
General working knowledge of network security; common ports and protocols.
General knowledge of networking and troubleshooting network connectivity.
Experience working with and/or managing a Threat and Vulnerability Management program.
Experience in malware and threat analysis, software deployment, incident management, and patch management.

Responsibilities

Monitors and responds to incidents in the cloud environment.
Keeps cloud infrastructure current, making recommendations with continually improving cloud security technologies.
Analyzes, designs, and develops programs to improve the security posture of the University while overseeing scripts, tests, and infrastructure automation capabilities.
Works with minimal oversight as the technical lead for information security related projects and customer interactions.
Updates eMass with the RMF controls.
Implements, administers, and maintains endpoint security with Azure Cloud Administration.
Ensures all endpoint product agents and sensors are up to date and fully in compliance with customer requirements.
Monitors the Host Intrusion Prevention and Anti-Virus rules deployed to the MCU computers to ensure it is not interfering unintentionally with applications.
Manages and monitors custom rules as needed and monitors USB devices connected to the systems.
Engineers, implements and monitors security measures for the protection of computer systems, networks and information.
Identifies and defines system security requirements.
Builds, upgrades and maintains endpoint security environments on unclassified network & standalone networks.
Designs computer security architecture and develops detailed cyber security designs.
May configure and deploy Azure Cloud Administration posture.
Maintains in-depth product knowledge of SACA and Azure Cloud enterprise solutions.
Maintains and administers Cloud Security protocols and procedures, performing vulnerability scanning and reporting.
Configures and maintains McAfee ePO tasks, automation, EEDK packages, custom query development, performance optimization, policy management, and application life cycle management.
Performs maintenance and management of security policy management, forensic analysis, IOC management, utilizes the Falcon API (psfalcon, falconpy), and real-time response to support Client operations teams.
Performs health checks and optimization activities on relevant security technologies or systems.
Provides incident response support through data collection and remediation activities, as they relate to endpoint security.
Assesses information security risk and facilitates remediation of identified vulnerabilities for IT security and risk across the enterprise. Reports on findings and provides recommendations for corrective action.
Provides guidance and best practice recommendations for IT security policies, procedures, and standards that meet standard and regulatory requirements.
Interacts with project teams, providing technical direction and assists identifying compensating controls where preferred security requirements cannot be met.
Prepares and documents standard operating procedures and protocols.
Configures and troubleshoots security infrastructure devices.
Develops technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
Writes comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.