E01-L03 Cloud Information Systems Security Engineer II

EXPANSIA•Hanscom AFB, MA

107d•$74,500 - $87,395•Hybrid

About The Position

JHNA, CTSi, and EXPANSIA have come together to form a Defense Technology platform named Aether Aerospace focused on delivering high-impact technologies, technology-enabled services and advanced manufacturing solutions to the U.S. Department of Defense and related national security customers. Backed by Falfurrias Management Partners, the platform brings together deep domain expertise across Army, Navy, and Air Force and Space Force programs, digital engineering, systems integration, and specialized manufacturing capabilities. The combined organization operates as a multi-entity aerospace and defense technology and tech-enabled services and manufacturing enterprise positioned for scalable growth, operational excellence, and long-term value creation. This role is a Full-time/Permanent Employee, located in a Hybrid Remote-Preferred location at Hanscom AFB, MA. The Cloud Information Systems Security Engineer II owns and manages the development of InfoSec engineering designs and implementation. They identify security issues and risks and develop mitigation plans in accordance with standards for cloud implementations. This role involves architecting, designing, implementing, supporting, and evaluating security-focused tools and services. It also includes overseeing the assessment and mitigation of system security threats/risks throughout the program life cycle; validation of system security requirements definition and analysis; and establishing system security designs. The engineer implements security designs—including hardware, software, data, and procedures—and verifies compliance with security requirements. In this role, you will support the implementation and maintenance of secure cloud environments while working closely with engineering, development, and program teams. You will contribute to strengthening the overall security posture of cloud-based systems by supporting security engineering activities, implementing security controls, and ensuring compliance with applicable federal and DoD cybersecurity standards.

Requirements

Active Secret Clearance
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field with at least 4 years of relevant experience.
Knowledge of cybersecurity principles, frameworks, and best practices
Experience with risk assessment methodologies and security compliance standards
Familiarity with security testing tools such as vulnerability scanners and SIEM solutions
Basic understanding of network protocols, firewalls, and system security configurations
Ability to analyze security policies and develop recommendations for improvement
Experience with AWS cloud services and environments
Proficiency with AWS security tools, including Identity and Access Management (IAM), Key Management Service (KMS), GuardDuty, Inspector, Macie, Security Hub, CloudTrail, and CloudWatch
DoD 8570 / 8140 IAT Level II certification
At least one cloud certification

Nice To Haves

Experience with NIST, FISMA, or DoD security frameworks
Familiarity with cloud security best practices and secure software development
Hands-on experience with security incident response and threat detection tools
Strong analytical and problem-solving skills with attention to detail
Experience with Agile development methodologies

Responsibilities

Support the design, implementation, and maintenance of secure cloud architectures in accordance with program and security requirements
Assist in the development, integration, and testing of security controls across cloud infrastructure, applications, and data environments
Conduct risk and vulnerability assessments and assist with developing mitigation strategies
Implement and maintain security configurations to ensure the confidentiality, integrity, and availability of systems
Support development and maintenance of security documentation including System Security Plans (SSPs), security control assessments, and contingency plans
Assist with system security engineering activities throughout the system lifecycle including requirements analysis, design validation, and security testing
Perform security scans and vulnerability assessments using approved tools and document findings and remediation recommendations
Support security compliance activities in accordance with federal and DoD cybersecurity frameworks
Participate in incident response activities and assist in investigation and remediation of security events
Collaborate with cloud engineers, system administrators, and program stakeholders to ensure security requirements are implemented effectively
Monitor systems and environments for potential security risks and assist in remediation efforts
Support certification and authorization activities and processes
Provide technical support to operational strategies aligned with program initiatives to optimize processes, enhance productivity, and ensure quality across program functions
Ensure 100% of planned hours are worked and recorded
Identify and forward to leadership any opportunities that could lead to growth within your work area
Participate in growth efforts as requested
Ensure all contractual deliverables are met or exceeded to the customer's satisfaction
Complete personal PDP and attend Staff Meeting and Storytime (with camera on)
Build productive and positive professional relationships with clients within the program
Execute all contract requirements as assigned in accordance with the contract-specific LCAT and requirements
Maintain active status of all required DoD 8570/8140 industry certifications in good standing through required Continuing Education (CE) units
Perform other related duties as assigned