Senior Cybersecurity/Cloud Security Engineer

Rividium•Washington, DC

11d

About The Position

RiVidium Inc. is seeking an experienced Senior Cybersecurity/Cloud Security Engineer to support enterprise cybersecurity, cloud security, risk management, and security engineering initiatives within a federal environment. The ideal candidate will have strong hands-on experience securing cloud environments while applying cybersecurity engineering principles, security controls, risk management frameworks, and industry best practices. This position will work closely with cybersecurity, cloud, infrastructure, systems engineering, and compliance teams to design, implement, assess, and continuously improve secure technology environments. The successful candidate will be comfortable translating cybersecurity requirements into practical technical solutions and will have experience working with cloud platforms, security controls, vulnerability management, and federal cybersecurity requirements.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related field.
Demonstrated experience in cybersecurity engineering, cloud security, information assurance, or a closely related discipline.
Strong hands-on experience with cloud security concepts and technologies.
Experience with cybersecurity risk management, security controls, vulnerability management, and security assessments.
Experience implementing or assessing cybersecurity controls within enterprise environments.
Knowledge of security architecture, network security, identity and access management, encryption, system hardening, and secure configuration practices.
Experience with NIST cybersecurity standards and the Risk Management Framework (RMF).
Ability to analyze technical environments, identify cybersecurity risks, and develop effective mitigation strategies.
Strong analytical, problem-solving, technical writing, and communication skills.
Ability to work independently and collaboratively with technical and program teams.
AWS Cloud certification
CISSP
Scrum certification

Nice To Haves

Experience supporting federal civilian or Department of Defense (DoD) cybersecurity programs.
Experience with AWS, Microsoft Azure, Google Cloud Platform (GCP), and/or Microsoft 365 security.
Experience with cloud security architecture and cloud-native security services.
Experience with Security Information and Event Management (SIEM), vulnerability management, endpoint security, identity management, and security monitoring technologies.
Knowledge of NIST SP 800-53, NIST SP 800-37, FISMA, and related federal cybersecurity requirements.
Experience supporting ATO, continuous monitoring, security control assessments, and POA&M management.
Experience with Infrastructure as Code (IaC), DevSecOps, CI/CD security, or security automation.
Experience with container, Kubernetes, or serverless security.
Additional cloud certifications such as AWS Solutions Architect, AWS Security Specialty, Azure Security Engineer, or Google Cloud security certifications.
Experience with Microsoft 365 security and compliance.
Familiarity with GRC platforms such as RSA Archer or ServiceNow GRC.

Responsibilities

Design, implement, and maintain secure cloud and enterprise technology environments.
Develop and implement cybersecurity controls and technical security solutions across cloud and on-premises environments.
Assess cloud architectures, applications, networks, systems, and infrastructure for security risks and vulnerabilities.
Apply security engineering principles throughout the system development and operational lifecycle.
Support cloud security architecture, configuration, hardening, monitoring, and compliance activities.
Implement security solutions aligned with organizational policies, federal requirements, and applicable cybersecurity frameworks.
Conduct security assessments, risk analyses, vulnerability reviews, and technical evaluations.
Support the implementation and assessment of security controls in accordance with NIST Risk Management Framework (RMF) requirements.
Assist with security authorization activities, including system security documentation, control implementation, assessment evidence, POA&M management, and continuous monitoring.
Identify security weaknesses and recommend practical remediation strategies.
Collaborate with Information System Security Officers (ISSOs), Security Control Assessors (SCAs), system owners, engineers, architects, and program leadership.
Support vulnerability management, configuration management, security monitoring, and remediation efforts.
Evaluate cloud services and emerging technologies for security risks and compliance considerations.
Develop technical documentation, security architecture documentation, assessment reports, procedures, and recommendations.
Support security automation and integration of cybersecurity tools and technologies.
Monitor changes to systems and cloud environments to ensure continued compliance with security requirements.
Participate in security reviews, audits, technical meetings, and customer briefings.
Provide technical guidance and mentorship to junior cybersecurity and cloud security personnel.
Stay current with emerging cloud security threats, technologies, vulnerabilities, and cybersecurity best practices.