Posted 7 months ago

Cloud Information Systems Security Engineer I

/Preferred Hanscom AFBHybridFull-time

AI Summary

Supports the design, implementation, and maintenance of secure cloud architectures and security controls for DoD cloud environments, conducting risk assessments, vulnerability scans, and compliance activities in accordance with federal cybersecurity standards.

About this role

Start Date: Immediate

JHNA, CTSi, and EXPANSIA have come together to form a Defense Technology platform named Aether Aerospace focused on delivering high-impact technologies, technology-enabled services and advanced manufacturing solutions to the U.S. Department of Defense and related national security customers. Backed by Falfurrias Management Partners, the platform brings together deep domain expertise across Army, Navy, and Air Force and Space Force programs, digital engineering, systems integration, and specialized manufacturing capabilities.

The combined organization operates as a multi-entity aerospace and defense technology and tech-enabled services and manufacturing enterprise positioned for scalable growth, operational excellence, and long-term value creation.

OVERVIEW

Full-time/Permanent Employee
Location: Hybrid Remote-Preferred Hanscom AFB, MA

Owns and manages the development of InfoSec engineering designs and implementation. Identifies security issues and risks and develops mitigation plans in accordance with standards for cloud implementations. Architect, design, implement, support, and evaluate security-focused tools and services. Oversee assessment and mitigation of system security threats/risks throughout the program life cycle; validation of system security requirements definition and analysis; establishing system security designs. Implements security designs—including hardware, software, data, and procedures—and verifies compliance with security requirements.

In this role, you will support the implementation and maintenance of secure cloud environments while working closely with engineering, development, and program teams. You will contribute to strengthening the overall security posture of cloud-based systems by supporting security engineering activities, implementing security controls, and ensuring compliance with applicable federal and DoD cybersecurity standards.

The proposed salary range for this position is $74,500-$87,395. There are a host of factors that can influence final salary including, but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications. Our employees value the flexibility EXPANSIA allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our unique mix of benefits options is designed to support and protect employees and their families. Employment benefits include health and wellness programs, income protection, paid leave and retirement and savings.

RESPONSIBILITIES

Support the design, implementation, and maintenance of secure cloud architectures in accordance with program and security requirements

Assist in the development, integration, and testing of security controls across cloud infrastructure, applications, and data environments

Supports system identity and credential management (ICAM) using common tools such as Azure Entra ID, Sailpoint, or Okta.

Conduct risk and vulnerability assessments and assist with developing mitigation strategies

Implement and maintain security configurations to ensure the confidentiality, integrity, and availability of systems

Support development and maintenance of security documentation including System Security Plans (SSPs), security control assessments, and contingency plans

Assist with system security engineering activities throughout the system lifecycle including requirements analysis, design validation, and security testing

Perform security scans and vulnerability assessments using approved tools and document findings and remediation recommendations

Support security compliance activities in accordance with federal and DoD cybersecurity frameworks

Participate in incident response activities and assist in investigation and remediation of security events

Collaborate with cloud engineers, system administrators, and program stakeholders to ensure security requirements are implemented effectively

Monitor systems and environments for potential security risks and assist in remediation efforts

Support certification and authorization activities and processes

Provide technical support to operational strategies aligned with program initiatives to optimize processes, enhance productivity, and ensure quality across program functions

Ensure 100% of planned hours are worked and recorded

Identify and forward to leadership any opportunities that could lead to growth within your work area

Participate in growth efforts as requested

Ensure all contractual deliverables are met or exceeded to the customer's satisfaction

Complete personal PDP and attend Staff Meeting and Storytime (with camera on)

Build productive and positive professional relationships with clients within the program

Execute all contract requirements as assigned in accordance with the contract-specific LCAT and requirements

Maintain active status of all required DoD 8570/8140 industry certifications in good standing through required Continuing Education (CE) units

Perform other related duties as assigned

KEY QUALIFICATIONS

Clearance: Active Secret Clearance
Education and Years of Experience: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field with at least 2+ years of relevant experience.

Substitutions: An Associate’s degree with a minimum of 4 years of relevant experience, or a high school diploma (or equivalent) with a minimum of 6 years of relevant experience, may be substituted for the Bachelor’s degree requirement.

Knowledge of cybersecurity principles, frameworks, and best practices

Experience with risk assessment methodologies and security compliance standards

Familiarity with security testing tools such as vulnerability scanners and SIEM solutions

Basic understanding of network protocols, firewalls, and system security configurations

Ability to analyze security policies and develop recommendations for improvement

Experience with AWS cloud services and environments

Proficiency with AWS security tools, including Identity and Access Management (IAM), Key Management Service (KMS), GuardDuty, Inspector, Macie, Security Hub, CloudTrail, and CloudWatch

DoD 8570 / 8140 IAT Level II certification 

At least one cloud certification 

PREFERRED ADDITIONAL QUALIFICATIONS

Experience with NIST, FISMA, or DoD security frameworks

Familiarity with cloud security best practices and secure software development

Hands-on experience with security incident response and threat detection tools

Strong analytical and problem-solving skills with attention to detail

Experience with Agile development methodologies

Skills

AWSAWS CloudTrailAWS CloudWatchAWS GuardDutyAWS IAMAWS InspectorAWS KMSAWS MacieAWS Security HubAzure Entra IDDoD 8570/8140 IAT Level IIFISMAICAMNISTOktaSailPointSIEMSystem Security PlansVulnerability Scanning