Cloud Cyber Engineer (Linux)

CACI•Sterling, VA

About The Position

CACI/BITS is seeking a Cloud Cyber Engineer to support the Makalu contract as part of a modern, fast-paced agile software development team. Cloud security engineers are integral to the development team and must be flexible and adaptive to program needs. The role serves as an information security specialist, reviewing software, hardware, and infrastructure changes; supporting system accreditation and continuous monitoring through the risk management framework; maintaining security documentation; and contributing to cyber monitoring, hardening, and response plans for a large program with multiple applications. The engineer researches, designs, tests, and implements cybersecurity features for demanding environments. The role applies a holistic systems approach to software development, system administration, networking, and security, helping applications meet elevated security requirements for systems that bridge security domains. The engineer also helps software developers understand zero trust architecture in a multi-releasability domain.

Requirements

Active TS/SCI clearance with Polygraph.
Five or more years of Linux- or cloud-based development experience.
Bachelor's degree in information systems, systems engineering, electrical engineering, information technology, or a related field; alternatively, seven or more years of relevant experience without a related degree.
Five or more years of relevant experience.
Understanding of engineering in development and operational environments.
Understanding of information assurance principles and organizational requirements.
Experience with Department of Defense or Intelligence Community system security control requirements.
Understanding of information security systems engineering principles and IT security technologies, such as firewalls, encryption, and proxies.
Experience with security.

Responsibilities

Review audit logs and create mitigation and corrective action plans.
Use forensic tools to reconstruct attacks and determine how to correct vulnerabilities.
Work with development teams to create, maintain, and monitor data connections, NPE security certificates, and firewall connection requests.
Apply cloud, network, and security best practices to meet application goals while minimizing security risk.
Continually implement and improve DevSecOps processes in a Linux- and cloud-based development environment.
Capture, refine, and help prioritize requirements based on risk, engineering principles, and mission requirements.
Architect security infrastructure to protect against cyberattacks.
Provide enhanced security architectures, development tools, and information systems to facilitate secure missions.
Provide Information System Owners (ISOs) with guidance, requirements understanding, and options for technical security engineering.
Conduct capability-based security analysis of system security architectures, identify vulnerabilities, and recommend mitigation alternatives.
Participate in the design, development, and implementation of information systems to ensure compliance with required security features and safeguards.
Conduct security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and network operations.
Evaluate scan results and work with system developers and administrators to eliminate or mitigate findings.
Generate certification and accreditation (C&A) documentation and artifacts, including System Security Plans and Network Interface Planning Documents, for import or upload to the SNOW tool.
Propose information-system categorization based on the types of information processed, in conjunction with DAO Representatives and ISOs.
Coordinate early with Security Control Assessors (SCAs) during engineering design for ongoing coordination and understanding of security controls, their application, security tradeoffs, and other decisions.