Skip to main content
Johnson Jobs

Cybersecurity Engineer

trekfedGranger, IN

yesterday

Occupations

Computer Systems Engineers/ArchitectsInformation Security EngineersInformation Security Analysts

Industries

Computer Systems Design ServicesOther Computer Related ServicesComputing Infrastructure Providers, Data Processing, Web Hosting, and Related Services
APPLY NOW (opens in a new tab)

About the role

Job Description Job DescriptionDescription: This role is responsible for securing and maintaining AWS GovCloud infrastructure in support of continuous authorization (cATO) within classified environments. The position combines hands-on cloud security engineering including boundary protection, vulnerability management, STIG/SRG assessments, patching, and POA&M tracking with NIST 800-53 and FedRAMP compliance evidence production and continuous monitoring. The engineer will triage security findings, review infrastructure-as-code changes for security impacts, coordinate incident response across cross-contractor teams, and build strong client relationships through clear, consistent communication.
Requirements
DUTIES AND RESPONSIBILITIES: Client Relationship:
  • Build a great relationship with the client
  • Understand our clients: drivers, needs, and pains
  • Work with internal and external leadership and engineering teams to formulate the best and consistent client communication
Technical Responsibilities:
  • Operate and maintain cloud boundary protection capabilities, including perimeter controls, segmentation, security logging, and monitoring
  • Perform infrastructure vulnerability assessments, configuration reviews, hardening, patching, and remediation validation against applicable STIG, SRG, and cATO requirements
  • Maintain infrastructure POA&Ms and track critical and high findings through remediation or approved disposition within BESPIN Security’s cATO timelines
  • Produce and maintain infrastructure authorization evidence, including boundary diagrams and dataflows, inventories, implemented and inherited controls, STIG/SRG/SCAP results, patch records, and continuous monitoring records
  • Keep evidence current before each boundary change and consolidate infrastructure evidence quarterly ahead of the companion contractor’s BOE delivery
  • Review security impacts of landing-zone, identity and access, network, and infrastructure-as-code changes; coordinate security requirements at cross-domain interfaces
  • Implement and document security controls aligned with NIST 800-53 and FedRAMP compliance requirements, supporting continuous authorization activities across cloud environmentsREQUIRED QUALIFICATIONS:
  • Ability to quickly secure Secret security clearance
  • Experience working in classified environments and handling classified information in accordance with applicable security requirements
  • Bachelor’s degree
  • Applying secure coding practices and documentation standards
  • Collaborating with cross-functional teams and other vendors to define, design, and deploy features
  • Demonstrated experience securing AWS cloud infrastructure, including identity and access, networking, segmentation, logging, monitoring, and boundary protection
  • Hands-on experience with infrastructure vulnerability management, patching, STIG/SRG assessments, SCAP results, and POA&M tracking
  • Experience with security incident triage and coordination across infrastructure, application, and Government security teams
  • Ability to review infrastructure-as-code and configuration changes for security impacts
  • Demonstrated proficiency with AWS GovCloud environments and AWS-native security services
  • Ability to troubleshoot and debug applications to ensure optimal performancePREFERRED QUALIFICATIONS:
  • Knowledge of DoD policies, regulations, procedures, and processes
  • Experience in the technology industry or related field
  • Experience with professional services or consulting
  • Direct experience with AWS GovCloud, JOSCE/JWCC environments, eMASS, and cross-domain interfaces would also be valuable
  • Experience with GitLab, including security pipeline configuration and management, multi-repository pipeline jobs, and CVE analysis and allow-list maintenance
  • Experience supporting RMF/cATO processes and preparing infrastructure control and configuration evidence, including familiarity with NIST 800-53 and FedRAMP compliance frameworks
  • Ability to distinguish inherited controls from contractor-implemented controls and maintain evidence as infrastructure changesPHYSICAL AND MENTAL REQUIREMENTS:
  • Continuous mental and/or visual attention required
  • Requires the ability to remain stationary for long periods of time
  • Regularly communicates to various people
  • Large amount of reading and analysis is required
  • Requires the ability to focus for an extended period of time
  • Requires the ability to travel
  • Requires the ability to work both remotely and at clients’ offices

Matching similar jobs

JOB OVERVIEW

Experience level

Lead

Location

Granger, IN

Occupation

Computer Systems Engineers/Architects

Industry

Computer Systems Design Services

Posted

yesterday

Tired of running searches?

Rank the roles you'd take once, and matches like these arrive on their own.

CREATE PROFILE (opens in a new tab)