CLOUD SECURITY ENGINEER

LeoRose Consulting is a company focused on providing cyber security solutions. They are seeking a Cyber Security Engineer (Cloud/ATO Steward) to assist system owners in creating ATO packages and ensuring compliance with VA’s authorization requirements.

Responsibilities:

• Work with system owners to create their ATO packages
• Review and create artifacts that comply with the VA’s authorization requirements
• Map those artifacts to the appropriate NIST 800-53 controls
• Review and help to write control implementation statements
• Work with system teams to review, update, and create their POAMs
• Help system teams to navigate the Enterprise Mission Assurance Support System (eMASS) GRC tool
• Provide guidance and support to system teams throughout every step of the RMF process and eMASS workflow

Requirements:

• Must have experience with eMASS
• Experience with supporting system Authority to Operate (ATO) processes, Artifact Development processes, Security Control implementation details, and Plan Of Action & Milestones (POA&M)
• Experience with leading and managing cyber teams
• Experience with client management and engagement
• Knowledge of the Risk Management Framework (RMF) and NIST 800-53 Rev. 4
• Ability to facilitate meetings
• Ability to analyze authorization documents and associated artifacts against authorization requirements to identify gaps, establish a schedule to address outstanding authorization requirements, coordinate directly with system team stakeholders, and implement work activities in accordance with established Standard Operating Procedures (SOPs)
• Ability to work independently and in teams
• Ability to work core business hours of 8 AM to 5 PM (EST), Monday through Friday
• Experience with ATO requirements, artifact orchestration, and review experience
• Experience with POAM Lifecycle management
• Experience with the Security Technical Implementation Guide (STIG) Viewer
• Experience with federal IT and Cloud security policies
• Knowledge of the system security scanner Tenable and or Nessus
• Knowledge of information technology concepts, cloud computing methodologies (PAAS, SAAS, IAAS), FedRAMP/AWS GovCloud, network/server topologies, and configurations
• Ability to articulate authorization requirements to varying degrees of staff/leadership
• CISSP or CISA or CAP or CISM or CRISC certification