Cloud Security Engineer

Tyto Athene is searching for an experienced Security Engineer to help deploy a Cloud Security Posture Management (CSPM) to a federal client.

Responsibilities:

• Assist in the documentation, implementation, and management security control integration with cloud environments to protect sensitive OCC data and systems in the cloud
• Build CSPM capabilities to continuously monitor cloud environments for misconfigurations, vulnerabilities, responding to and mitigating security threats, and identifying non-compliance with OCC’s NIST 800-53 based security standards
• Perform security risk assessments, reviews, and recommendations for new and existing cloud applications and services
• Collaborate with other engineering and application development teams to integrate Zero Trust Architecture (ZTA) security principles into the software development lifecycle (SDLC)
• Represent cyber security team on internal working groups and providing subject matter expertise on cloud security engineering best practices
• Develop, document, and review secure baseline configurations for each technology used within the environment
• Design, develop, and maintain detailed security drawings

Required:

• US Citizenship, Public Trust Eligibility required
• Minimum 8 years of general experience and 6 years of Cloud Security Engineering experience
• Bachelor's degree in a technical field from an accredited college/university or equivalent experience
• Experience utilizing and configuring security services within Azure and/or AWS environments such as SecurityHub, Purview, InTune and Defender
• Experience automating the remediation of configuration flaws in cloud environments
• Experience creating custom API integrations
• Strong analytical and organizational skills
• Ability to communicate complex concepts efficiently and accurately
• Familiarity with implementing DISA STIGs and CIS Benchmarks preferred
• Thorough understanding and knowledge of networking in a hybrid cloud and Zero Trust environment

Desired:

• Experience with Qualys, including TotalCloud module
• Experience integrating reports and workflows with ServiceNow and Splunk
• AWS Solutions Architect – Associate, Azure Security Engineer – Associate, CISSP-ISSEP, CISSP-ISSAP, GCFW, GSEC, Splunk, or other certifications preferred
• Familiarity with implementing DISA STIGs and CIS Benchmarks preferred

Location:

• This is a hybrid role with expectations of being on the client sit