Cloud Response Subject Matter Expert (SME)

Resource Management Concepts, Inc.•Quantico, VA

5d•$155,000 - $175,000•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a Cloud Response Subject Matter Expert (SME) to support a customer in Quantico, VA. This role involves building and maintaining detection use cases to identify unauthorized activity, assisting with incident investigations, and helping the customer design and implement new defensive cyberspace tools within cloud computing environments. The selected applicant will be responsible for developing detection use cases focused on cloud environments, investigating and responding to cyberspace incidents, and assisting with the design and deployment of new cloud capabilities. A key aspect of the role is demonstrating effectiveness by identifying and preventing Red Team activity. The SME will also be responsible for updating relevant documentation and preparing and presenting training on cloud computing security, attack scenarios, and specific tactics, techniques, and procedures. Additionally, support will be provided to maintain the customer's CSSP accreditation.

Requirements

Active TS/SCI (DoD TOP SECRET clearance with SCI eligibility) is required. Applicant selected will be subject to security investigation(s) and must maintain eligibility requirements for access to classified information.
Five (5) years of practical experience in a Cybersecurity, Engineering, T&E, or A&A-related field (Cloud Investigations, Incident Response, Detection Engineering, etc.)
College degree in a technical or managerial-related discipline; OR a High School diploma/H.S. equivalency certificate with seven (7+) years of experience in Cybersecurity, Engineering, T&E, or A&A.
DoD/W 8570 IAT Level III certification (valid/current)
DoD/W 8570 CSSP Analyst certification (valid/current)
Future requirement (in lieu of DoD/W 8570 certification requirements): DoD/W 8140 Cyber Workforce (DCWF) Role 511 Cyber Defense Analyst (i.e., CCNA Cybersecurity, CySA+, CFR, GCFA, GCIA, GICSP) and/or 531 Cyber Defense Incident Responder (i.e., CISSP, CySA+, CFR, GCFA, GCIA, GICSP) certification at the Advanced Proficiency Level.

Nice To Haves

Cloud-specific certifications (valid/current): CompTIA Cloud+
CCSP (Certified Cloud Security Professional)
Microsoft Azure Fundamentals
AWS Certified Solutions Architect - Associate
AWS Certified Solutions Architect - Professional
AWS Certified Cloud Practitioner
Google Associate Cloud Engineer

Responsibilities

Developing detection use cases specifically focused on detecting unauthorized activity in cloud computing environments using the customer’s existing cloud computing defense tools.
Assisting with the investigation of and response to cyberspace incidents involving cloud computing environments and technologies.
Assisting the customer with designing and deploying new capabilities in cloud computing environments.
Demonstrating effectiveness by successfully identifying and preventing Red Team activity in the customer’s cloud computing environment.
Updating tactics, techniques, procedures, training, and education documentation as needed.
Preparing and presenting a course that covers the basics of Cloud Computing security, common attack scenarios, and specific tactics, techniques, processes, and procedures.
Providing support to maintain the customer’s CSSP accreditation per the standards, including documentation and technical writing support.