Cyber Security Engineer

Ardent Principles, Inc.•Herndon, VA

5d•$130,000 - $260,000•Onsite

About The Position

We are looking for a mission-focused Cyber Security Engineer to evaluate cloud architectures, conduct technical exchange meetings with service providers, and design or review systems built on AWS, Azure, Oracle Cloud, or GCP. You’ll support continuous monitoring, analyze critical findings using tools like Rapid7, Nessus, and Qualys, and manage POA&Ms to maintain compliance. We offer advanced services in data science, data engineering, software engineering, AI solutions, cybersecurity, staff augmentation, and IT program management. At Ardent Principles, passionate integrity and a relentless pursuit of excellence define who we are. We offer a competitive salary range and a comprehensive benefits package designed to support your long‑term success. Our mission is to connect fulfilled employees with satisfied clients, ensuring your well‑being and professional satisfaction directly contribute to exceptional outcomes for those we serve. Join us as we continue building the future of secure, high‑impact solutions.

Requirements

Active TS/SCI with Full Scope Polygraph
Experience conducting security assessments, particularly for cloud infrastructure and cloud services.
Experience facilitating TEMs with cloud service providers to review cloud service architectures
Experience designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, or Microsoft Azure cloud architecture.
Experience utilizing or reviewing cross domain technology and common architecture designs.
Experience working with continuous monitoring requirements to include scan analysis for critical or high findings with common scan tools such as Rapid 7, Nessus, and Qualys.
Experience monitoring or closing Plan of Action and Milestone items (POA&Ms).
Experience utilizing compliance tools to track assessment and authorization activities such as Xacta 360, Risk Vision, RSA Archer.
Experience working with the common control provider concept within the NIST Risk Management Framework.
Experience with security control assessments to include working with SCAs and preparing security packages for SCAs.
Experience conducting information system security engineering activities.
Project management experience including project planning, task tracking, milestone management, and resource coordination
Experience developing and maintaining program metrics, performance indicators, and compliance status dashboards
Experience preparing technical reports, program highlights, status briefings, and leadership communications.

Nice To Haves

Using the Sponsor’s or IC element A&A process.
Creating or reviewing A&A body of evidence documentation in a cloud security environment.
Identifying, implementing, or reviewing appropriate information security controls.
Working in Xacta 360
A&A tools.
Assessing cloud infrastructure and cloud services for security gaps and weaknesses according to industry standards.
Reviewing cloud service provider body of evidence packages for completeness and accuracy.
Facilitating technical exchange meetings (TEMs) with cloud service providers to review cloud service architectures.
Providing project management support including project planning, task tracking, milestone management, and resource coordination to ensure timely delivery of all contract requirements.

Responsibilities

Conducting security assessments, particularly for cloud infrastructure and cloud services.
Facilitating TEMs with cloud service providers to review cloud service architectures
Designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, or Microsoft Azure cloud architecture.
Utilizing or reviewing cross domain technology and common architecture designs.
Working with continuous monitoring requirements to include scan analysis for critical or high findings with common scan tools such as Rapid 7, Nessus, and Qualys.
Monitoring or closing Plan of Action and Milestone items (POA&Ms).
Utilizing compliance tools to track assessment and authorization activities such as Xacta 360, Risk Vision, RSA Archer.
Working with the common control provider concept within the NIST Risk Management Framework.
Security control assessments to include working with SCAs and preparing security packages for SCAs.
Conducting information system security engineering activities.
Project management experience including project planning, task tracking, milestone management, and resource coordination
Developing and maintaining program metrics, performance indicators, and compliance status dashboards
Preparing technical reports, program highlights, status briefings, and leadership communications.