Senior Security Subject Matter Expert (Cloud & Security)

Accountabilities

• Design, implement, maintain, and continuously improve security controls across system development and operational environments.
• Secure AWS-based cloud environments while applying working knowledge of Azure and/or Google Cloud security capabilities.
• Perform system hardening, vulnerability scanning, security monitoring, and incident response activities to protect cloud and enterprise environments.
• Analyze security logs, develop and refine alerts, and support forensic investigations into potential security incidents.
• Contribute to security architecture design and the integration of security controls into new and existing systems.
• Support patch selection, deployment, and updates while helping ensure systems remain secure and appropriately maintained.
• Protect the security, integrity, and appropriate use of training data and other sensitive information.
• Implement and oversee network monitoring, access controls, security monitoring, and related protective measures.
• Review and approve security-related changes and updates involving artificial intelligence and other emerging technologies.
• Support compliance initiatives aligned with Cybersecurity Maturity Model Certification (CMMC) Level 2, Service Organization Control (SOC) 2, and ISO/IEC 27001 standards.
• Contribute to security documentation, risk assessments, control implementation, audit preparation, and ongoing compliance activities.
• Apply security engineering and automation practices to strengthen operational efficiency, resilience, and threat detection capabilities.

Requirements

• A Bachelor’s degree in a relevant field is required, or equivalent professional experience may be considered.
• At least 3 years of relevant professional security experience is required.
• Hands-on experience securing on-premises and AWS environments is required.
• Demonstrated experience with cloud security technologies, enterprise security tools, and security control implementation.
• Proficiency in Python for security automation, tooling, scripting, or related engineering applications.
• Strong understanding of cybersecurity principles, cloud infrastructure security, system hardening, vulnerability management, monitoring, access controls, and incident response.
• Experience supporting security architecture and integrating security controls into enterprise systems is preferred.
• Experience working in Federal, Department of Defense, or other regulated environments is highly desirable.
• Familiarity with Cybersecurity Maturity Model Certification (CMMC), SOC 2, and ISO/IEC 27001 compliance requirements is preferred.
• Experience with artificial intelligence, machine learning systems, or emerging technology security is desirable.
• Relevant certifications such as CompTIA Security+, GIAC, Global Industrial Cyber Security Professional (GICSP), CompTIA Network+, or ITIL are preferred.
• Strong analytical and problem-solving abilities, with the capacity to investigate security issues and develop practical solutions.
• Ability to communicate technical security risks and recommendations clearly to technical and non-technical stakeholders.
• An active Top Secret clearance with polygraph is required.

Benefits

• Opportunity to work on secure cloud and cybersecurity initiatives supporting Federal and Department of Defense environments.
• Exposure to advanced cloud security, cybersecurity operations, compliance, artificial intelligence security, and emerging technologies.
• Opportunity to contribute to security architecture, risk management, automation, and enterprise security improvements.
• Professional environment focused on protecting mission-critical systems and strengthening security resilience.
• Opportunity to apply and expand expertise across AWS and other major cloud platforms.
• Experience supporting recognized security and compliance frameworks, including CMMC Level 2, SOC 2, and ISO/IEC 27001.