Security Engineer with IRS MBI Clearance
工作标题：安全工程师位置：远程时间：全职许可要求：IRS MBI 许可情况概述：我们为 NIST 800-53安全控制专业知识和风险与漏洞管理的强大的技术背景的安全工程师提供了一个令人兴奋的机会。理想的候选人将在实施安全控制，评估漏洞并确保遵守联邦网络安全框架如 FISMA,FEDRAMP 和 RMF 方面发挥关键作用。主要责任是：·开发，评估和记录系统安全计划 (SSPs),行动计划和里程碑 (POA&Ms) 和基于风险的决策 (RBDs). · 与开发人员和技术人员合作，指导每个安全控制家族的适当实施。· 收集，组织和提交安全控制评估 (SCAs) 的证据。· 在加密方法，IAM 概念以及 SAML,OIDC,SSO 和 MFA 等安全技术方面的技术专业知识。· 有与 SIEM 技术 （例如 Splunk）和其他监控工具的经验。·通过风险和漏洞管理识别并纠正脆弱性。· 团队及外部客户一起制定安全策略，设计解决方案，并在部署期间提供指导。所需资格：· 信息技术领域至少8年的经验，有越来越多的责任。· 信息安全解决方案中最少5年经验。· 有关的安全证书 （例如 CISSP,CCSP,CEH）. · 深入了解 NIST 800-53,RMF,FEDRAMP,FISMA 和其他联邦安全标准。· 系统安全漏洞和有效补救技术的知识。·熟悉网络概念，包括子网，路由，VPC/VNet,安全组，负载平衡等。· 经验基于微服务的架构和设计多租户应用程序安全解决方案，使用 Docker 和 Kubernetes 等容器化和编排工具 （非常合适）. · 在 AWS 云平台支持安全方面的实践经验 （非常合適）. · 申请人必须是美国公民或合法永久居民 （绿卡持有人）至少3年并且符合联邦税收。最初发布在喜马拉雅地区。
查看英文原文
This is a remote position.
Job Title: Security Engineer
Location: Remote
Duration: Full-Time
Clearance Required: IRS MBI ClearancePosition Overview:
We are offering an exciting opportunity for a Security Engineer with expertise in NIST 800-53 security controls and a strong technical background in risk and vulnerability management. The ideal candidate will play a crucial role in implementing security controls, assessing vulnerabilities, and ensuring compliance with federal cybersecurity frameworks such as FISMA, FedRAMP, and RMF.
Key Responsibilities:
- Develop, assess, and document System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and Risk-Based Decisions (RBDs).
- Collaborate with developers and technical staff to guide the proper implementation of each security control family.
- Collect, organize, and submit evidence for Security Control Assessments (SCAs).
- Possess technical expertise in security technologies such as encryption methods, IAM concepts, and technologies like SAML, OIDC, SSO, and MFA.
- Experience with SIEM technologies (e.g., Splunk) and other monitoring tools.
- Identify and remediate vulnerabilities through risk and vulnerability management.
- Work across teams and with external customers to develop security strategies, design solutions, and provide guidance during deployment.
Required Qualifications:
- At least 8 years of experience in the Information Technology field with increasing responsibility.
- A minimum of 5 years of experience in Information Security solutions.
- Relevant security certifications (e.g., CISSP, CCSP, CEH).
- Deep understanding of NIST 800-53, RMF, FedRAMP, FISMA, and other federal security standards.
- Knowledge of system security vulnerabilities and effective remediation techniques.
- Familiarity with networking concepts, including subnetting, routing, VPC / VNet, security groups, load balancing, etc.
- Experience with microservices-based architectures and designing security solutions for multi-tenant applications, using containerization and orchestration tools like Docker and Kubernetes (highly desirable).
- Hands-on experience supporting security for AWS cloud platforms (highly desirable).
- Candidates must be U.S. Citizens or Legal Permanent Residents (Green Card holders) for at least 3 years and be Federal Tax compliant.
Originally posted on Himalayas